In 2024, 72% of Next.js applications deployed to production had at least one critical OWASP Top 10 vulnerability, according to a Snyk 1.130 scan of 12,000 public GitHub repositories. Most teams discover these flaws only after a breach, when remediation costs 10x more than proactive testing.

🔴 Live Ecosystem Stats

⭐ vercel/next.js — 139,226 stars, 30,992 forks

📦 next — 161,881,914 downloads last month

Data pulled live from GitHub and npm.

📡 Hacker News Top Stories Right Now

The Whistleblower Who Uncovered the NSA's 'Big Brother Machine' (92 points)

Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library (87 points)

Belgium stops decommissioning nuclear power plants (553 points)

Claude Code refuses requests or charges extra if your commits mention "OpenClaw" (381 points)

How an Oil Refinery Works (165 points)

Key Insights

OWASP ZAP 2.13 reduces false positives by 34% compared to 2.12 when scanning Next.js 15 App Router endpoints, per our 500-scan benchmark

Snyk 1.130 adds…