so far, i would still categorize the asynchronous server-side support as dangerous

it still doesnt do anything to handle rejected promises, unhandled rejected promises are ignored

2.1 debugger wise, im also kinda disappointed in it it does not handle closures well

and while i havent tried it yet, i hope the new secrets can be used outside of secure strings or keys Ive found secure strings bad enough at mixed content that i cant even implement basic authentication with it

closest i got with secure strings was to do the base 64 encoding beforehand so you can treat the authorization header as entirely plaintext

expect fancier credential/secret key field