<p><strong>TLDR:</strong> Python native extensions (C, C++, Rust) can now be compiled to WebAssembly and published to PyPI so Pyodide installs them directly in the browser — a meaningful unlock for scientific and systems libraries. A hands-on benchmark found Mastra uses 1.5–2.5x more tokens than LangChain for the same agent pipeline, with LangChain running 25–45% faster. Nette 3.4 drops CSRF tokens entirely in favor of Sec-Fetch headers, which have been broadly supported since Safari 16.4. React Spectrum ships an MCP server and LLM-friendly docs for AI-assisted development.</p>
<hr>
<h2>Python native extensions now compile to WebAssembly and publish to PyPI for Pyodide</h2>
<p>C, C++, and Rust Python extensions can now be compiled to WebAssembly and distributed through PyPI, letting Pyodide install them directly in the browser without extra steps. This closes a long-standing gap where popular scientific and systems libraries were simply unavailable in browser-based Python runtimes. If you’re building anything with Pyodide — notebooks, in-browser data tools, educational environments — the package ecosystem just got a lot less limiting. <a href="https://app.daily.dev/posts/KxNNY3b3k" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Mastra uses 1.5–2.5x more tokens than LangChain on the same agent pipeline</h2>
<p>A direct comparison running an identical five-step research-and-synthesis pipeline found LangChain 25–45% faster than Mastra, with Mastra consuming 1.5–2.5x more tokens because its Agent class carries full conversation history through every step. The benchmark also caught an evaluation bias where unequal context inputs made Mastra appear to produce better output until raw Tavily results were passed to both. If token cost is a real constraint on your agent workloads, this is worth reading before you commit to a framework. <a href="https://app.daily.dev/posts/N31UZXjpC" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Nette 3.4 replaces CSRF tokens with Sec-Fetch headers</h2>
<p>Nette 3.4’s new isFrom() API uses browser-native Sec-Fetch-* headers to handle CSRF protection automatically — no tokens, no hidden fields, no session state. The headers have been broadly supported since Safari 16.4 (March 2023) and can’t be spoofed by JavaScript or extensions. The new approach also closes the subdomain loophole that existed with the old cookie method. Upgrading nette/http to 3.4 is enough; addProtection() and its tokens can be removed from existing forms. <a href="https://app.daily.dev/posts/LL3elkLpP" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>React Spectrum adds MCP server and LLM-friendly docs</h2>
<p>React Spectrum now ships an MCP server configurable in Cursor via a simple JSON config, an npx-installable Agent Skills integration, and all documentation pages exposed as markdown files with a llms.txt index. It’s a practical setup for teams using AI coding assistants with Adobe’s component library — similar in spirit to what Angular’s skills repo did for NgModule drift. <a href="https://app.daily.dev/posts/wq6aYZuhm" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Prop For That: declarative CSS custom properties from live browser data:</strong> A new JS library exposes pointer position, viewport size, scrollbar dimensions, battery level, and image colors as CSS custom properties via a data attribute — no manual JS wiring — and pairs with CSS Style Queries, now supported in all major browsers. <a href="https://app.daily.dev/posts/4RBBkqOKd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Image optimization checklist for Core Web Vitals: images are 40–60% of page weight:</strong> A practical 2026 checklist confirms images account for 40–60% of page weight and are the top LCP culprit — key items include fetchpriority=“high” on the LCP image, never lazy-loading it, and serving AVIF with WebP fallback. <a href="https://app.daily.dev/posts/jzw6K1LiO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Playwright MCP: AI agents controlling real browsers for bug reproduction:</strong> Playwright MCP lets AI agents open pages, click, type, and capture accessibility snapshots against a live browser, with the explicit recommendation that findings should land in proper versioned Playwright tests rather than stay as unrepeatable agent sessions. <a href="https://app.daily.dev/posts/B7RC9jsYY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


Frontend development news, CSS techniques, framework updates, and browser API changes.

Web Digest

A developer newsletter covering four main stories: Python native extensions (C, C++, Rust) can now be compiled to WebAssembly and published to PyPI for direct Pyodide browser installation. A benchmark comparing Mastra and LangChain on an identical agent pipeline found Mastra uses 1.5–2.5x more tokens and runs 25–45% slower due to full conversation history being carried through every step. Nette 3.4 replaces CSRF tokens with browser-native Sec-Fetch headers, eliminating hidden fields and session state. React Spectrum ships an MCP server and LLM-friendly docs for AI-assisted development with Cursor. Also covered: a CSS custom properties JS library, a Core Web Vitals image optimization checklist, and Playwright MCP for AI-driven browser automation.

Python Wasm extensions land on PyPI, Mastra burns 2x tokens vs LangChain