Security in React, React Compiler Rust Port, Server Functions in parallel, Auth book, Vercel Sandbox Docker Support
Security in React Applications
A thorough guide to securing React apps beyond the built-in protections. Covers how to prevent XSS, sanitize HTML with DOMPurify, store auth tokens safely, validate server-side inputs using Zod with Server Functions, and set up Content Security Policy with nonces for inline scripts
PR: Port React Compiler to Rust
The React team shared an early Rust port of React Compiler not long ago, and it’s already come a long way. It now works across nearly all of Meta’s codebase with the same output as the TS version, while also running faster
⚡️ Sponsor: Tigris Data
Get the universal API for storage
Snapshot = tag. Fork = branch. Announcing StorageSDK, bringing this Git-like model to storage, making it easier to build reproducible AI-agent workflows in TypeScript.
📙 Articles / Tutorials / News
PR: Run Server Functions in parallel
The Next.js team is working on letting Server Functions run in parallel, hidden behind a parallelServerFunctions feature flag. The PR is still a draft, but let's hope this lands soon
► A Guide to React Compiler Rendering
Explains how React rendering actually works and what the new React Compiler is doing under the hood to make your app faster
React Performance: From Sluggish to Lightning
A simple visual guide to what actually makes React apps slow today. Covers state colocation, the React Compiler, useTransition, lazy loading, and a few easy-to-miss performance bugs
𝕏 The problem with React's useEffect
A quick explainer on how useEffect can cause infinite re-render loops and crash your app. The video also teases React Doctor, a tool that automatically detects these kinds of issues and helps you fix them
📦 Projects / Packages / Tools
Auth book
Pilcrow, the creator of Lucia Auth, wrote a free book covering everything you need to know about implementing authentication in web applications
Run Docker containers inside Vercel Sandbox
You can now install and run Docker containers inside Vercel Sandbox. Useful for spinning up services like Redis or Postgres for testing, validating images, or previewing containerized apps
shadcn/ui June 2026 - GitHub Registries
shadcn now lets you turn any public GitHub repository into a registry. Just add a registry.json file to the root of your repo, define your items, and anyone can install them with the shadcn CLI using shadcn add <username>/<repo>/<item>.
Legend List 3.0
A drop-in replacement for FlatList/FlashList that now works on the web too. It handles dynamic sizes automatically, supports chat and AI chat apps out of the box, and uses less CPU and memory than alternatives
⚡️ Sponsor: Expo
How is your app performing in production?
Most teams learn about performance regressions from user complaints. Observe surfaces them within hours of the release that caused it.
🌈 Related
DOM Manipulation That Kills Your 60fps
This study tested common DOM anti-patterns in Chromium and scanned 275 repos to see how often they appear. The clearest result: innerHTML += in a loop is extremely slow and can freeze the UI, while forced layout reads after writes also cause noticeable slowdowns
My Frontend Stack In 2026
A developer walks through the 15 tools they actually use in production. Next.js for content sites, Vite 8 for SPAs, Tailwind + shadcn/ui for styling, TanStack Query for data fetching, Zustand for state, Zod for validation, and more
Migrating from Radix UI to Base UI: Step-by-Step Guide
Covers why Base UI matters, key API differences like the shift from asChild to the render prop, component-specific changes for Accordion, Select, Tooltip and more, plus common pitfalls to watch out for
A Technical Deep Dive Into the New Raycast
Raycast rebuilt their app from scratch to run on both macOS and Windows. They went with a hybrid approach: React and TypeScript for UI in system WebViews, native shells in Swift and C#, Node.js for backend logic, and Rust for performance-critical parts like file indexing
Have a link you want to share? Send me an email at erfan@nextjsweekly.com
All submissions are appreciated.
👋 See you next week!