- Environment variables exposed - .env.local contains actual credentials - No build optimization - Not using Next.js optimizations fully - No monitoring - No error tracking or performance monitoring