Datastar doesn't seem like a good match for me. It requires unsafe-eval in CSP[0], which basically forfeits the benefit of CSP. I like htmx, as it's mostly compatible with CSP, though it does weaken it slightly.

I enjoy writing Zig but I don't think it's a good tool for web programming. For a basic CRUD web app, I'm willing to sacrifice performance for memory safety, as I don't want to risk malicious input gaining RCE on my server.

[0] https://data-star.dev/reference/security#content-security-po...