Dad DX @Vercel Prev: Dagster, Twitter, Excalidraw, Smyte, Instagram, Facebook, React.js
The internet
- Tweets 11,098
- Following 984
- Followers 36,280
- Likes 7,426
this mostly matches our internal research, except that we have @Rich_Harris's @sveltejs as among the most token efficient frameworks.
Great research from Nolan Lawson on the AI cost of JavaScript frameworks, with benchmarks, not vibes.
@nuxt_js comes out strong for the agentic era:
- Fewest tokens of any framework (even fewer than vanilla JS)
- Near the top for cost and time per run
- Second-fewest lines of code to maintain
The cheapest code is the code the agent never has to write.
nolanlawson.com/2026/10/28/tβ¦
1
2
27
3,946
Introducing Vercel CI
β’ Intelligently skips tasks with Turborepo
β’ 2-6Γ faster CI in our internal repositories
β’ Optimized for agents via Vercel MCP and CLI
After nearly 8 million tasks, we're excited for the future of agentic CI. In beta on all plans.
vercel.com/blog/introducing-β¦
106
80
1,386
244,187
We cut nearly 2 MB of compressed JavaScript across ππΆ.πππ and ππππππ.πππ using coding agents and the Next.js Bundle Analyzer.
See how to trace imports, compare snapshots, and use our optimizer skill to reduce your bundles.
nextjs.org/blog/ship-less-jaβ¦
29
22
413
32,682
Pete Hunt π retweeted
We just upgraded our @dubdotco monorepo to @nextjs 16.4.3 w/ Turbopack, and it's a gamechanger.
Our @vercel builds used to take ~11 mins, and it's now down to ~5 mins π€―
This is HUGE especially with agent-driven development where halving build times == doubling agent turnaround time.
If you haven't upgraded to next@16 yet, consider this your PSA to do so.
25
4
177
36,693
Itβs a great week to watch the battlestar galactica pilot piped.video/OPKGbg16ulU
9
2,067
Pete Hunt π retweeted
Vercel has proactively rolled out Firewall-level mitigations for today's Node.js RCE vulnerability, in advance of the official patch release.
All traffic for all deployments is automatically protected. We're actively monitoring and rolling out managed runtime upgrades.
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26.
Vercel WAF rules are live for every project and block known exploit patterns.
vercel.com/kb/bulletin/node-β¦
112
131
2,568
255,645
Maybe @Vjeux can port the typescript compiler to Minecraft redstone circuits next
1
14
2,747
Pete Hunt π retweeted
Ahead of Next.js 16.4, I worked on applying the upcoming features across v0 and validating our new Partial Prefetching optimizer Skill in a real app.
The post includes before-and-after videos of the navigation experience and walks through the caching, prefetching, and production checks behind the refactor.
Excited to finally share it!
We used a coding agent with Next.js 16.4's new prefetching controls and Skill to improve v0's navigation experience at no added cost.
The loop:
β’ Capture navigation with πππππππ()
β’ Define the target UI in the test
β’ Refactor until it passes
nextjs.org/blog/improving-naβ¦
1
7
110
6,389
let's go @MarcosHernanz!
We offered $1M to escape Vercel Sandbox.
β’ 1,285 reports
β’ $242,000 in bounties paid out
β’ One Linux kernel zero day discovered
β’ No reports of customer data compromise
vercel.com/blog/findings-froβ¦
3
2
21
5,268
π
The Next.js site has a new look!
We've redesigned the homepage, /docs, /blog, and more, with a consistent design that keeps the focus on the content.
nextjs.org
A few highlights β
1
1
20
1,726
Next.js 16.4
β’ Cache Components by default in new apps
β’ Static output guarantees and more control over prefetching
β’ Agent-guided upgrades and feedback
β’ 20β25% smaller Turbopack disk cache
β’ Faster development and smaller bundles
nextjs.org/blog/next-16-4
52
189
2,455
280,047
Turso is joining @supabase.
Together, we're building the database platform for the agentic era: everything agents need, from lightweight databases to Postgres at petabyte scale.
More details in thread. π
3
2
39
3,292
Made another thing!
New: agent-browser Contact Sheets
Agents can now debug UI bugs they couldn't see before
Record an interaction β get timestamped frames w/ changes highlighted
This signature appears then disappears
Instead of having identical before/after screenshots, agents see what happened
4
1
39
7,124
Pete Hunt π retweeted
New: agent-browser Contact Sheets
Agents can now debug UI bugs they couldn't see before
Record an interaction β get timestamped frames w/ changes highlighted
This signature appears then disappears
Instead of having identical before/after screenshots, agents see what happened
28
20
542
33,862
Pete Hunt π retweeted
We collaborated with @HacktronAI to reproduce the libheif vulnerability in Next.js and responsibly disclose it to the maintainer.
Learn about the dependency chain and fix β
vercel.com/blog/reproducing-β¦
8
14
158
49,183
Pete Hunt π retweeted
When I might have sounded alarmist over the last few weeks, it was because I was aware @S1r1u5_'s excellent work here that is the perfect demonstration of our new reality:
- There is a vulnerability in a random image codec library
- This library is used by O(every app)
- There are many such libraries
- It was possible to find the vulnerability with now-well-behind-frontier models
- There are many such vulns and they will all be found over the next months
Vercel will do everything it can to do our part. This is why there have been more Next.js security releases over the last weeks and I expect the need to continue at this pace π«‘
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAIβs internal codebase . It took us <72h. π§΅
9
6
163
21,013