The Next.js, Vercel, Supabase monoculture is one CVE away from disaster

Every AI coding assistant on the planet is funneling you toward the same three vendors. That's not a convenience. That's a single point of failure for the entire indie web. A recent Vercel security incident lit up the developer discourse, and it forced a question nobody wants to sit with: what happens when half the indie web shares the same blast radius? The Default Stack Nobody Chose Ask any AI coding agent to spin up a project. Nine times out of ten you'll get Next.js, deployed on Vercel, with