Next.js’s Security Vulnerability, Remix Walks Away from RSCs, and Rsdoctor 1.0
Hosted by
Share this episode 
Full Description
Next.js had a security vulnerability scare last week due to an internal header in its middleware that allowed for skipping middleware (like auth validation) before reaching routes. The Next.js team responded quickly and patched the security holes, but this serves as a reminder to stay vigilant, keep dependencies updated, and implement multiple layers of security. Michael Jackson, co-founder of Remix and React Router, is calling it quits for Remix supporting React Server Components. Lots of React-based frameworks built prior to RSCs have been struggling to support the new paradigm shift - and lots of devs have bemoaned the fact because of the added complexity it introduces, and MJ is over it. This isn’t the first time framework authors have made bold claims to not support new breaking changes, so we’ll have to wait and see if he sticks to it. Rsdoctor, a build analyzer tool by ByteDance, has hit v1.0. Rsdoctor goes beyond other build analysis tools offering a visual view of the build process and smart analysis to help dev teams identify bottlenecks, optimize performance, and improve overall engineering quality. It already supports Docusaurus, Storybook, Next.js, Lynx, and all the Rs-products in the Rspack ecosystem. Startup Browser Use announces a $17M seed funding round to continue work on its solution to make websites more readable for AI agents. Browser Use scrapes websites and breaks them down into a more digestible format for agents to help autonomous agents understand the different options and make better decisions when interacting with those sites. And RedwoodJS, another React-based metaframework enters maintenance mode. This week’s Fire Starter is the CSS interpolate-size: allow-keywords feature. It enables animations between a number (like 0) and an intrinsic value (like ‘auto’, ‘min-content’, ‘max-content’, etc.). No longer do CSS animations require hard coded numeric values to slide open accordions or menus. Browser support is still limited, but as this is a progressive web enhancement, go ahead and give it a shot.