What are the key points to remember while developing web Widget with HTML, CSS, JS (and PHP and MYSQL on BE)

What are the key points to remember while developing web Widget with HTML, CSS, JS (and PHP and MYSQL on BE)? For example: calling the script within anonymous function, because we don't want to update anything on the client side. What else? I mean also in terms of secure.

Br