<YC />

Notes & Essays

Practical notes on React, Next.js, Vue, product UI, and shipping reliable software across health-tech and logistics.

Topic · Next.js & Security

Featured

Next.js & Security· SEP 2026· 5 min read
AI ships code faster — and regressions too. A practical Testing Trophy for a Next.js App Router blog: Vitest for lib logic, Playwright for list → detail → 404.

More writing

05 posts
Before Ask Yeremia on /lab went public, I worried about stolen API keys, runaway bills, and visitors sweet-talking the model past its rules — here is the four-part checklist I actually ran.
Read article
A home-only overlay, sessionStorage (not localStorage), useSyncExternalStore, and Motion's AnimatePresence — with the hero painted underneath so LCP is not gated on the intro.
Read article
A 91 mobile score was LCP, not a missing sitemap. How this Next.js portfolio split Motion, labs, and the mobile sheet — and the traps that look like dead code but aren’t.
Read article
XSS, cookies, CSRF, CORS, CSP, and lockfiles — what React and Vue already escape, where v-html and dangerouslySetInnerHTML still bite, and how that maps onto App Router and Nuxt.
Read article
Stay in the loop

Follow new posts

No marketing newsletter. Grab the RSS feed for occasional notes on frontend craft, APIs, and shipping product UI — or email me directly.

No trackers · occasional updates only/feed.xml
Open to opportunities

Want to talk about a role or a product problem?

Open for Software Engineer roles (frontend-heavy) — full-time or contract. Reach out by email or LinkedIn (WhatsApp works too).