This Month in React

TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs

Listen Later

Transcript and show notes

TMiR on Bluesky

  • [00:13] Intro
  • [01:00] New releases
    • [01:04] BetterAuth 1.4
    • [02:47] Immer 11, RTK 2.11
    • [06:00] Storybook 10
    • [06:22] 0.1 version of Remix team’s “event interaction” package
  • [08:04] Main content
    • [08:08] Ecosystem panel discussion of React Foundation at React Summit NY
    • [14:46] React Concurrent Stores: Polyfill, React-Redux POC
    • [17:52] React Router and transition usage
      • [18:08] Matt Brophy and Ricky discussing nuances of behavior, use with React Router
    • [22:53] The State of TanStack, Two Years of Full-Time OSS
      • [25:57] TanStack DB 0.5
      • [31:01] Tanner teasing a WIP TanStack Start RSC implementation
    • [32:25] State of the web ecosystem
      • [33:13] Cloudflare November outage postmortem
      • [36:10] "What if people don't want to create things"
        • [39:39] “When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”
        • [45:53] Related, “Dead Framework Theory” from last month
      • [48:12] Alex Russell’s latest stats on web devices and network budgets
      • [51:48] Npm attack, Shai-Hulud round 2
        • [52:06] Analysis of its evolution in code from Sept
        • [55:23] Our plan for a more secure npm supply chain from September
        • [55:29] NPM update on token management changes
  • [55:34] ⚡ Lightning round ⚡
    • [55:38] TS 6.0 hopefully Feb 2026, 7.0 (native) soon after (more details in the TypeScript.fm podcast)
    • [56:03] Latest TC39 proposal updates
    • [56:32] Chrome (and other browsers) wants to remove XSLT from the web platform
    • [57:14] “Your URL is Your State”, and David K’s “Goodbye, useState” talk
    • [57:46] Aiden Bai’s “React Grab” util
    • [58:39] Creating a custom Node module loader to import from Bittorrent
    • [59:22] Ryan Carniato’s stream on researching “async signals”
    • [59:33] Details of building Node’s TS type stripping support
    • [59:58] The Web Animation Performance Tier List
  • [01:00:14] Conferences (React, Javascript)
    • [01:00:22] CFPs
      • [01:01:01] React Paris (Also a community survey)
      • [01:01:12] JSWorld CFP closes Dec 31, notifies by Feb 1
  • [01:01:18] Ending


  • (00:00) - This Month in React - November Episode (SM)
  • (00:13) - Intro
  • (01:00) - New releases
  • (01:04) - [BetterAuth 1.4](https://www.better-auth.com/blog/1-4)
  • (02:47) - [Immer 11](https://github.com/immerjs/immer/releases/tag/v11.0.0), [RTK 2.11](https://github.com/reduxjs/redux-toolkit/releases/tag/v2.11.0)
  • (06:00) - [Storybook 10](https://storybook.js.org/blog/storybook-10/)
  • (06:22) - [0.1 version of Remix team’s “event interaction” package](https://github.com/remix-run/remix/tree/main/packages/interaction)
  • (08:04) - Main content
  • (08:08) - [Ecosystem panel](https://gitnation.com/contents/panel-discussion-the-future-of-react-and-its-ecosystem) discussion of React Foundation at React Summit NY
  • (14:46) - React Concurrent Stores: [Polyfill](https://github.com/thejustinwalsh/react-concurrent-store), [React-Redux POC](https://github.com/reduxjs/react-redux/pull/2263)
  • (17:52) - React Router and transition usage
  • (18:08) - [Matt Brophy and Ricky discussing nuances of behavior, use with React Router](https://github.com/reactwg/async-react/discussions/5)
  • (22:53) - [The State of TanStack, Two Years of Full-Time OSS](https://tanstack.com/blog/tanstack-2-years)
  • (25:57) - [TanStack DB 0.5](https://tanstack.com/blog/tanstack-db-0.5-query-driven-sync)
  • (31:01) - [Tanner teasing a WIP TanStack Start RSC implementation](https://x.com/tannerlinsley/status/1983999424486633931)
  • (32:25) - State of the web ecosystem
  • (33:13) - [Cloudflare November outage postmortem](https://blog.cloudflare.com/18-november-2025-outage/)
  • (36:10) - ["What if people don't want to create things"](https://macwright.com/2025/10/21/what-if-they-dont-want-to.html)
  • (39:39) - [“When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”](https://webtechnology.news/when-everyones-a-developer-how-do-we-promote-the-web-platform-over-react/)
  • (45:53) - Related, [“Dead Framework Theory”](https://aifoc.us/dead-framework-theory/) from last month
  • (48:12) - [Alex Russell’s latest stats on web devices and network budgets](https://infrequently.org/2025/11/performance-inequality-gap-2026/)
  • (51:48) - Npm attack, [Shai-Hulud round 2](https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains)
  • (52:06) - [Analysis of its evolution in code](https://www.aikido.dev/blog/bugs-in-shai-hulud-debugging-the-desert) from Sept
  • (55:23) - [Our plan for a more secure npm supply chain](https://github.blog/...
    • ...more
    View all episodesView all episodes
    Download on the App Store
    This Month in ReactBy Reactiflux; with Mark Erikson, Mo Khazali, and Carl Vitullo