TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs
- [00:13] Intro
- [01:00] New releases
- [08:04] Main content
- [08:08] Ecosystem panel discussion of React Foundation at React Summit NY
- [14:46] React Concurrent Stores: Polyfill, React-Redux POC
- [17:52] React Router and transition usage
- [22:53] The State of TanStack, Two Years of Full-Time OSS
- [32:25] State of the web ecosystem
- [33:13] Cloudflare November outage postmortem
- [36:10] "What if people don't want to create things"
- [39:39] “When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”
- [45:53] Related, “Dead Framework Theory” from last month
- [48:12] Alex Russell’s latest stats on web devices and network budgets
- [51:48] Npm attack, Shai-Hulud round 2
- [52:06] Analysis of its evolution in code from Sept
- [55:23] Our plan for a more secure npm supply chain from September
- [55:29] NPM update on token management changes
- [55:34] ⚡ Lightning round ⚡
- [55:38] TS 6.0 hopefully Feb 2026, 7.0 (native) soon after (more details in the TypeScript.fm podcast)
- [56:03] Latest TC39 proposal updates
- [56:32] Chrome (and other browsers) wants to remove XSLT from the web platform
- [57:14] “Your URL is Your State”, and David K’s “Goodbye, useState” talk
- [57:46] Aiden Bai’s “React Grab” util
- [58:39] Creating a custom Node module loader to import from Bittorrent
- [59:22] Ryan Carniato’s stream on researching “async signals”
- [59:33] Details of building Node’s TS type stripping support
- [59:58] The Web Animation Performance Tier List
- [01:00:14] Conferences (React, Javascript)
- [01:00:22] CFPs
- [01:01:01] React Paris (Also a community survey)
- [01:01:12] JSWorld CFP closes Dec 31, notifies by Feb 1
- [01:00:22] CFPs
- [01:01:18] Ending
- (00:00) - This Month in React - November Episode (SM)
- (00:13) - Intro
- (01:00) - New releases
- (01:04) - [BetterAuth 1.4](https://www.better-auth.com/blog/1-4)
- (02:47) - [Immer 11](https://github.com/immerjs/immer/releases/tag/v11.0.0), [RTK 2.11](https://github.com/reduxjs/redux-toolkit/releases/tag/v2.11.0)
- (06:00) - [Storybook 10](https://storybook.js.org/blog/storybook-10/)
- (06:22) - [0.1 version of Remix team’s “event interaction” package](https://github.com/remix-run/remix/tree/main/packages/interaction)
- (08:04) - Main content
- (08:08) - [Ecosystem panel](https://gitnation.com/contents/panel-discussion-the-future-of-react-and-its-ecosystem) discussion of React Foundation at React Summit NY
- (14:46) - React Concurrent Stores: [Polyfill](https://github.com/thejustinwalsh/react-concurrent-store), [React-Redux POC](https://github.com/reduxjs/react-redux/pull/2263)
- (17:52) - React Router and transition usage
- (18:08) - [Matt Brophy and Ricky discussing nuances of behavior, use with React Router](https://github.com/reactwg/async-react/discussions/5)
- (22:53) - [The State of TanStack, Two Years of Full-Time OSS](https://tanstack.com/blog/tanstack-2-years)
- (25:57) - [TanStack DB 0.5](https://tanstack.com/blog/tanstack-db-0.5-query-driven-sync)
- (31:01) - [Tanner teasing a WIP TanStack Start RSC implementation](https://x.com/tannerlinsley/status/1983999424486633931)
- (32:25) - State of the web ecosystem
- (33:13) - [Cloudflare November outage postmortem](https://blog.cloudflare.com/18-november-2025-outage/)
- (36:10) - ["What if people don't want to create things"](https://macwright.com/2025/10/21/what-if-they-dont-want-to.html)
- (39:39) - [“When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”](https://webtechnology.news/when-everyones-a-developer-how-do-we-promote-the-web-platform-over-react/)
- (45:53) - Related, [“Dead Framework Theory”](https://aifoc.us/dead-framework-theory/) from last month
- (48:12) - [Alex Russell’s latest stats on web devices and network budgets](https://infrequently.org/2025/11/performance-inequality-gap-2026/)
- (51:48) - Npm attack, [Shai-Hulud round 2](https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains)
- (52:06) - [Analysis of its evolution in code](https://www.aikido.dev/blog/bugs-in-shai-hulud-debugging-the-desert) from Sept
- (55:23) - [Our plan for a more secure npm supply chain](https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/) from September
- (55:29) - [NPM update on token management changes](https://github.blog/changelog/2025-11-05-npm-security-update-classic-token-creation-disabled-and-granular-token-changes/)
- (55:34) - ⚡ Lightning round ⚡
- (55:38) - [TS 6.0 hopefully Feb 2026, 7.0 (native) soon after](https://bsky.app/profile/danr.bsky.social/post/3m5fz3vw2z22s) (more details in the [TypeScript.fm](https://share.transistor.fm/s/ad05eae6) podcast)
- (56:03) - [Latest TC39 proposal updates](https://bsky.app/profile/robpalmer.bsky.social/post/3m62djhwj3k2i)
- (56:32) - [Chrome (and other browsers) wants to remove XSLT from the web platform](https://groups.google.com/a/chromium.org/g/blink-dev/c/CxL4gYZeSJA/m/yNs4EsD5AQAJ?pli=1)
- (57:14) - [“Your URL is Your State”](https://alfy.blog/2025/10/31/your-url-is-your-state.html), and [David K’s “Goodbye, useState” talk](https://gitnation.com/contents/goodbye-usestate)
- (57:46) - [Aiden Bai’s “React Grab” util](https://www.react-grab.com/)
- (58:39) - [Creating a custom Node module loader to import from Bittorrent](https://evanhahn.com/node-torrent-import/)
- (59:22) - [Ryan Carniato’s stream on researching “async signals”](https://www.youtube.com/watch?v=ori9xZhvNlc)
- (59:33) - [Details of building Node’s TS type stripping support](https://satanacchio.hashnode.dev/the-summer-i-shipped-type-stripping)
- (59:58) - [The Web Animation Performance Tier List](https://motion.dev/blog/web-animation-performance-tier-list)
- (01:00:14) - Conferences ([React](https://react.dev/community/conferences), [Javascript](https://confs.tech/javascript))
- (01:00:22) - CFPs
- (01:01:01) - [React Paris](https://docs.google.com/forms/d/e/1FAIpQLSfLICWs7vpK5fuMkZyJk4GyDtZBs08NMKJ0eIOOZBUxo98beQ/viewform) ([Also a community survey](https://docs.google.com/forms/d/e/1FAIpQLSd0pjOsMo0z3fvhv9EhgvUBWA4CdIcsivOCQi8wBmiNc_yXPQ/viewform))
- (01:01:12) - [JSWorld](https://docs.google.com/forms/d/e/1FAIpQLSfv3GuXwsDyR42XsvJwfFsN4SKjy8WvKtqYp_nEK0yhzVNP1g/viewform) CFP closes Dec 31, notifies by Feb 1
- (01:01:18) - Ending
Creators and Guests
Host
Mark Erikson
An engineer maintaining Redux and Redux Toolkit, working at Replay.io to make smarter AI chat bots and debuggers using time travel.
Producer
Carl Vitullo
Solopreneur just vibing, posts are probably bullshit. Community lead at Reactiflux, the largest chat community of React professionals.
