#132

Security in React, React Compiler Rust Port, Server Functions in parallel, Auth book, Vercel Sandbox Docker Support


Together with
Tigris Data

Security in React Applications

Security in React Applications

A thorough guide to securing React apps beyond the built-in protections. Covers how to prevent XSS, sanitize HTML with DOMPurify, store auth tokens safely, validate server-side inputs using Zod with Server Functions, and set up Content Security Policy with nonces for inline scripts

PR: Port React Compiler to Rust

The React team shared an early Rust port of React Compiler not long ago, and it’s already come a long way. It now works across nearly all of Meta’s codebase with the same output as the TS version, while also running faster


⚡️ Sponsor: Tigris Data

Get the universal API for storage

Get the universal API for storage

Snapshot = tag. Fork = branch. Announcing StorageSDK, bringing this Git-like model to storage, making it easier to build reproducible AI-agent workflows in TypeScript.

Make sure to stay up to date about new features, best articles and tools in the Next.js ecosystem by subscribing to the newsletter.

Once‑weekly email, best links, no fluff.

Join 7,000+ developers. 100% free.

📙 Articles / Tutorials / News

PR: Run Server Functions in parallel

The Next.js team is working on letting Server Functions run in parallel, hidden behind a parallelServerFunctions feature flag. The PR is still a draft, but let's hope this lands soon

► A Guide to React Compiler Rendering

Explains how React rendering actually works and what the new React Compiler is doing under the hood to make your app faster

React Performance: From Sluggish to Lightning

A simple visual guide to what actually makes React apps slow today. Covers state colocation, the React Compiler, useTransition, lazy loading, and a few easy-to-miss performance bugs

𝕏 The problem with React's useEffect

A quick explainer on how useEffect can cause infinite re-render loops and crash your app. The video also teases React Doctor, a tool that automatically detects these kinds of issues and helps you fix them


📦 Projects / Packages / Tools

Auth book

Auth book

Pilcrow, the creator of Lucia Auth, wrote a free book covering everything you need to know about implementing authentication in web applications

Run Docker containers inside Vercel Sandbox

You can now install and run Docker containers inside Vercel Sandbox. Useful for spinning up services like Redis or Postgres for testing, validating images, or previewing containerized apps

shadcn/ui June 2026 - GitHub Registries

shadcn now lets you turn any public GitHub repository into a registry. Just add a registry.json file to the root of your repo, define your items, and anyone can install them with the shadcn CLI using shadcn add <username>/<repo>/<item>.

Legend List 3.0

A drop-in replacement for FlatList/FlashList that now works on the web too. It handles dynamic sizes automatically, supports chat and AI chat apps out of the box, and uses less CPU and memory than alternatives


⚡️ Sponsor: Expo

How is your app performing in production?

How is your app performing in production?

Most teams learn about performance regressions from user complaints. Observe surfaces them within hours of the release that caused it.


🌈 Related

DOM Manipulation That Kills Your 60fps

This study tested common DOM anti-patterns in Chromium and scanned 275 repos to see how often they appear. The clearest result: innerHTML += in a loop is extremely slow and can freeze the UI, while forced layout reads after writes also cause noticeable slowdowns

My Frontend Stack In 2026

A developer walks through the 15 tools they actually use in production. Next.js for content sites, Vite 8 for SPAs, Tailwind + shadcn/ui for styling, TanStack Query for data fetching, Zustand for state, Zod for validation, and more

Migrating from Radix UI to Base UI: Step-by-Step Guide

Covers why Base UI matters, key API differences like the shift from asChild to the render prop, component-specific changes for Accordion, Select, Tooltip and more, plus common pitfalls to watch out for

A Technical Deep Dive Into the New Raycast

Raycast rebuilt their app from scratch to run on both macOS and Windows. They went with a hybrid approach: React and TypeScript for UI in system WebViews, native shells in Swift and C#, Node.js for backend logic, and Rust for performance-critical parts like file indexing


Have a link you want to share? Send me an email at erfan@nextjsweekly.com

All submissions are appreciated.

👋 See you next week!