You add Nodemailer to a Next.js project, wire it into a contact form, and the build fails with a module resolution error about net or tls. Or it builds fine, deploys, and every send times out. Or worse, it works — and a security scan later shows your SMTP password sitting in the browser bundle. […]