Season 2 · Episode 11
TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs
This Month in React · Reactiflux; with Mark Erikson, Mo Khazali, and Carl Vitullo
November 30, 20251h 2m
Audio is streamed directly from the publisher (op3.dev) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
- [00:13] Intro
- [01:00] New releases
- [01:04] BetterAuth 1.4
- [02:47] Immer 11, RTK 2.11
- [06:00] Storybook 10
- [06:22] 0.1 version of Remix team’s “event interaction” package
- [08:04] Main content
- [08:08] Ecosystem panel discussion of React Foundation at React Summit NY
- [14:46] React Concurrent Stores: Polyfill, React-Redux POC
- [17:52] React Router and transition usage
- [22:53] The State of TanStack, Two Years of Full-Time OSS
- [32:25] State of the web ecosystem
- [33:13] Cloudflare November outage postmortem
- [36:10] "What if people don't want to create things"
- [39:39] “When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”
- [45:53] Related, “Dead Framework Theory” from last month
- [48:12] Alex Russell’s latest stats on web devices and network budgets
- [51:48] Npm attack, Shai-Hulud round 2
- [52:06] Analysis of its evolution in code from Sept
- [55:23] Our plan for a more secure npm supply chain from September
- [55:29] NPM update on token management changes
- [55:34] ⚡ Lightning round ⚡
- [55:38] TS 6.0 hopefully Feb 2026, 7.0 (native) soon after (more details in the TypeScript.fm podcast)
- [56:03] Latest TC39 proposal updates
- [56:32] Chrome (and other browsers) wants to remove XSLT from the web platform
- [57:14] “Your URL is Your State”, and David K’s “Goodbye, useState” talk
- [57:46] Aiden Bai’s “React Grab” util
- [58:39] Creating a custom Node module loader to import from Bittorrent
- [59:22] Ryan Carniato’s stream on researching “async signals”
- [59:33] Details of building Node’s TS type stripping support
- [59:58] The Web Animation Performance Tier List
- [01:00:14] Conferences (React, Javascript)
- [01:00:22] CFPs
- [01:01:01] React Paris (Also a community survey)
- [01:01:12] JSWorld CFP closes Dec 31, notifies by Feb 1
- [01:00:22] CFPs
- [01:01:18] Ending
- (00:00) - This Month in React - November Episode (SM)
- (00:13) - Intro
- (01:00) - New releases
- (01:04) - [BetterAuth 1.4](https://www.better-auth.com/blog/1-4)
- (02:47) - [Immer 11](https://github.com/immerjs/immer/releases/tag/v11.0.0), [RTK 2.11](https://github.com/reduxjs/redux-toolkit/releases/tag/v2.11.0)
- (06:00) - [Storybook 10](https://storybook.js.org/blog/storybook-10/)
- (06:22) - [0.1 version of Remix team’s “event interaction” package](https://github.com/remix-run/remix/tree/main/packages/interaction)
- (08:04) - Main content
- (08:08) - [Ecosystem panel](https://gitnation.com/contents/panel-discussion-the-future-of-react-and-its-ecosystem) discussion of React Foundation at React Summit NY
- (14:46) - React Concurrent Stores: [Polyfill](https://github.com/thejustinwalsh/react-concurrent-store), [React-Redux POC](https://github.com/reduxjs/react-redux/pull/2263)
- (17:52) - React Router and transition usage
- (18:08) - [Matt Brophy and Ricky discussing nuances of behavior, use with React Router](https://github.com/reactwg/async-react/discussions/5)
- (22:53) - [The State of TanStack, Two Years of Full-Time OSS](https://tanstack.com/blog/tanstack-2-years)
- (25:57) - [TanStack DB 0.5](https://tanstack.com/blog/tanstack-db-0.5-query-driven-sync)
- (31:01) - [Tanner teasing a WIP TanStack Start RSC implementation](https://x.com/tannerlinsley/status/1983999424486633931)
- (32:25) - State of the web ecosystem
- (33:13) - [Cloudflare November outage postmortem](https://blog.cloudflare.com/18-november-2025-outage/)
- (36:10) - ["What if people don't want to create things"](https://macwright.com/2025/10/21/what-if-they-dont-want-to.html)
- (39:39) - [“When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”](https://webtechnology.news/when-everyones-a-developer-how-do-we-promote-the-web-platform-over-react/)
- (45:53) - Related, [“Dead Framework Theory”](https://aifoc.us/dead-framework-theory/) from last month
- (48:12) - [Alex Russell’s latest stats on web devices and network budgets](https://infrequently.org/2025/11/performance-inequality-gap-2026/)
- (51:48) - Npm attack, [Shai-Hulud round 2](https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains)
- (52:06) - [Analysis of its evolution in code](https://www.aikido.dev/blog/bugs-in-shai-hulud-debugging-the-desert) from Sept
- (55:23) - [Our plan for a more secure npm supply chain](https://github.blog/...