
Security News
OpenClaw Advisory Surge Highlights Gaps Between GHSA and CVE Tracking
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.
@vercel/next-browser
Advanced tools
Headed Chromium with React DevTools pre-loaded, driven over a stateless CLI. Built for debugging Next.js PPR shells and React component trees.
Stateless CLI → stateful daemon over a Unix socket. The daemon holds the browser open between commands, so each CLI invocation is instant.
pnpm add -D @vercel/next-browser
Requires Node >=22.18 (native TypeScript stripping, no build step).
npx next-browser open http://localhost:3000
npx next-browser tree
npx next-browser ppr lock
npx next-browser push /dashboard
npx next-browser ppr unlock
npx next-browser close
open <url> [--cookies-json <file>] launch browser and navigate
close close browser and daemon
goto <url> full-page navigation (new document load)
push [path] client-side navigation (interactive picker if no path)
back go back in history
reload reload current page
restart-server restart the Next.js dev server (clears fs cache)
ppr lock enter PPR instant-navigation mode
ppr unlock exit PPR mode and show shell analysis
tree show React component tree
tree <id> inspect component (props, hooks, state, source)
screenshot save full-page screenshot to tmp file
eval <script> evaluate JS in page context
errors show build/runtime errors
logs show recent dev server log output
network [idx] list network requests, or inspect one
~/.next-browser/default.socklaunchPersistentContext with the React DevTools
extension sideloaded (--load-extension)installHook.js pre-injected via addInitScript to beat the content-script
race — DevTools hook is always available on first render__REACT_DEVTOOLS_GLOBAL_HOOK__ by
intercepting the operations wire format/__nextjs_original-stack-frames
endpoint, falling back to raw source-map lookup for framework code@next/playwright's instant() callback open across CLI
calls so you can poke at the frozen shell interactivelyMIT
FAQs
Headed Playwright browser with React DevTools pre-loaded
The npm package @vercel/next-browser receives a total of 308 weekly downloads. As such, @vercel/next-browser popularity was classified as not popular.
We found that @vercel/next-browser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 387 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.

Research
/Security News
Mixed-script homoglyphs and a lookalike domain mimic imToken’s import flow to capture mnemonics and private keys.

Security News
Latio’s 2026 report recognizes Socket as a Supply Chain Innovator and highlights our work in 0-day malware detection, SCA, and auto-patching.