March 2022 Summaries

WebContainers have moved out of beta for Chromium-based browsers, marking a significant milestone for StackBlitz and the web development community. This achievement, celebrated by StackBlitz DevRel Sylwia Vargas, was made possible through collaboration with the Google Chrome team and contributions from the open-source community. WebContainers enable full-stack environments to run directly in the browser, offering compatibility with major frameworks like Vite, Remix, SvelteKit, Nuxt, and Next, as well as the broader Node.js ecosystem. This development allows developers to run their Node.js toolchains on WebContainers, which are now utilized by over two million developers monthly. With plans to expand support to new browsers and further innovations on the horizon, StackBlitz continues to push the boundaries of web development, emphasizing their commitment to making the web faster and more secure.

StackBlitz, a web IDE powered by WebAssembly, has become an official member of the Bytecode Alliance, a cross-industry partnership aiming to promote secure-by-default computing through WebAssembly. This collaboration enables StackBlitz to accelerate the deployment of its WebContainers across various platforms and environments, including collaborations with Mozilla to support Firefox and with Shopify for secure e-commerce applications. The Bytecode Alliance has made significant strides with new standards like the WebAssembly System Interface (WASI) and tools like wasmtime, aiming to address security issues in software toolchains. StackBlitz seeks to contribute by enhancing feedback loops for standards and implementors, promoting WebAssembly adoption, and securing supply chains. This partnership is seen as pivotal for advancing a secure and efficient future in web computing, with StackBlitz playing a key role in driving innovations and addressing critical platform challenges.

In the February 2022 update from StackBlitz, the company highlights several significant developments, including improvements to their developer experience (DX) and compatibility features, new templates, and strategic team growth. Notably, StackBlitz introduced various API enhancements, new templates for frameworks like Vue, Node, and Static HTML/JS/CSS, and a collaboration with Vite, where they became the biggest backer for Vite core development. The update also celebrates the addition of new team members, such as Patak, a Vite core maintainer, and details technical blog posts authored by StackBlitz engineers addressing challenges in web development. Furthermore, the update shares recent podcasts and livestreams featuring team members discussing StackBlitz's developments and innovations. Looking ahead, StackBlitz expresses excitement about continuing their monthly updates and engaging with their community through platforms like Twitter and Discord.

StackBlitz's WebContainers, a proprietary Node.js runtime launched in 2021, necessitate cutting-edge browser functionalities like Shared Array Buffers (SABs) and Cross-Origin Embedder Policy (COEP) Credentialless to operate effectively across all browsers, including Safari and Firefox, as well as in on-prem enterprise environments. SABs are crucial for high-performance applications but faced security challenges, such as the Meltdown and Spectre vulnerabilities discovered in 2018, leading to browser vendors requiring cross-origin isolation. This requirement disrupted many applications, including StackBlitz WebContainers, prompting temporary workarounds like the Chrome origin trial. COEP Credentialless, as a long-term solution, allows secure loading of cross-origin resources by automatically removing embedded credentials and is expected to enable multi-browser support. StackBlitz plans to transition to this approach in Q2 2022, pending broader browser adoption, and aims to ensure stability and security before extending it to its Enterprise Edition.