Datasette Apps lets you host self-contained HTML/JavaScript applications inside Datasette, using sandboxed iframes with CSP to run read-only or write SQL queries against your data. Built by Simon Willison, it combines the power of Claude Artifacts with a persistent relational database.
Simon Willison launched datasette-apps on June 18, 2026, a new plugin for Datasette that lets you host self-contained HTML+JavaScript applications inside a Datasette instance. These apps run in a tightly constrained `
I've been using Datasette for years as a quick dashboard tool, and this plugin finally makes it feel like a real application platform. The security-first approach — especially the CSP immutability and MessageChannel — is exactly the kind of hard engineering that separates a toy from a production tool. My only concern: the reliance on LLMs for security audits is still unproven at scale, but Willison's manual review gives me confidence. I'd love to see this pattern adopted by other data tools like SQLite Browser or even Jupyter.
— DevDigest Editorial
Datasette Apps provides a secure, sandboxed way to run interactive HTML/JS apps that query your database — without exposing raw SQL or risking data exfiltration. It's a practical pattern for building custom data tools on top of Datasette, and the security engineering (CSP + MessageChannel) is worth studying for any developer building sandboxed execution environments.
Every Sunday - top tech stories, industry breakthroughs, and developer tools delivered to your inbox.
No spam, unsubscribe anytime.
After 12 years of development, Project Valhalla's first major feature—value classes—has been integrated into OpenJDK and will debut as a preview in JDK 28. This JEP 401 addition brings flat, dense memory layout to user-defined types, bridging the gap between classes and primitives.
DuckDB's speed comes from in-process execution, columnar storage, and vectorized processing. This deep dive covers the query pipeline from SQL to logical plan, plus the storage layer that makes it all possible.
about 7 hours ago
More in
Developer Tools
