This Month in React

Reactiflux; with Mark Erikson, Mo Khazali, and Carl Vitullo

How busy professionals stay on top of the React ecosystem. We give you a 1 hour recap of the latest news and nuance in React's development and ecosystem, upcoming conferences, and open source releases. New episodes the first week of every month, with live recordings on the last Wednesday of every month in the Reactiflux stage. Hosted Mark Erikson (Redux maintainer), Carl Vitullo (startup veteran), and Mo Khazali (head of mobile at Theodo). See something for us? Post to #tech-reads-and-news

  1. 2d ago

    TMiR 2026-05: Who even is on the Core team anymore, TanStack got pwn'd bad

    Transcript and URLs ★ Support this podcast ★ Reply on Bluesky (00:00) - Interview (00:55) - Some podcast meta (01:49) - New Releases (01:51) - [TS v7 beta](https://devblogs.microsoft.com/typescript/announcing-typescript-7-0-beta/) (05:15) - [Rolldown 1.0](https://voidzero.dev/posts/announcing-rolldown-1-0) (06:51) - [Fate 1.0](https://fate.technology/posts/fate-1.0) (09:48) - Main Content (09:56) - React Core (10:09) - React team status after Meta layoffs? (14:59) - [React Compiler port to Rust still in progress](https://x.com/poteto/status/2056865079543681329), latest [PR](https://github.com/facebook/react/pull/36173) (15:54) - [Tanner Linsley is "projecting" React](https://tannerlinsley.com/posts/projecting-react) (it's definitely not a fork) (21:38) - [Tests are the new moat](https://saewitz.com/tests-are-the-new-moat) (23:32) - [Brooks Lybrand thoughts on React + community after React Miami](https://brookslybrand.com/posts/react-miami-2026.html) (25:04) - [TanStack is exploring how to expose Server Components](https://tanstack.com/blog/react-server-components) (27:19) - [Who Owns the Tree](https://tanstack.com/blog/who-owns-the-tree) (27:31) - [RSCs in TanStack](https://frontendmasters.com/blog/react-server-components-in-tanstack/) (28:12) - [Remix v3 beta preview](https://remix.run/blog/remix-3-beta-preview) (28:35) - Both Remix and TanStack are exploring "what if no React"? (36:11) - [TSRX](https://tsrx.dev/), a variant on JSX (41:52) - Security! Everything is compromised (42:04) - [TanStack Router compromised](https://tanstack.com/blog/npm-supply-chain-compromise-postmortem), and [Socket analysis](https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack) (46:58) - [TanStack followup with followup hardening](https://tanstack.com/blog/incident-followup) (47:10) - [Nx monorepo tool compromised](https://nx.dev/blog/nx-console-v18-95-0-postmortem) as a result (52:02) - React2Shell recaps from [Lachlan Davidson](https://lachlan.nz/blog/the-react2shell-story/) and [Sylvie](https://sylvie.fyi/posts/react2shell/) (52:25) - [Next 16.2.5 and more React CVEs](https://github.com/vercel/next.js/releases/tag/v16.2.5) (53:19) - [NPM adds “staged packages”](https://docs.npmjs.com/staged-publishing) and [E18E adds guidance](https://e18e.dev/docs/publishing.html#staged-packages) (54:50) - [PNPM 11 defaults to min release age](https://socket.dev/blog/pnpm-11-adds-new-supply-chain-protection-defaults), NPM 12 will [block by default](https://github.com/npm/rfcs/pull/868) (57:59) - [Review your GH Actions, people!](https://github.com/e18e/ecosystem-issues/issues/266) (59:13) - Mark posted his big AI blog posts. [Part 1: Fears and Journey](https://blog.isquaredsoftware.com/2026/05/ai-thoughts-part-1-fears-opinions-journey/) (01:08:39) - Outro

    1h 10m
  2. Mar 3

    TMiR 2026-02: CloudFlare remakes Next with AI; Vercel big mad. We talk too much about AI Agents

    Transcript and links (00:00) - This Month in React February 2026 (01:46) - New releases (01:50) - [TS 6.0 beta](https://devblogs.microsoft.com/typescript/announcing-typescript-6-0-beta/)/! (last TS impl release; stricter defaults) (02:34) - [Yarn 6 preview](https://yarn6.netlify.app/blog/2026-01-28-yarn-6-preview/) (rewritten in Rust) (02:52) - [Electrobun](https://blackboard.sh/electrobun/docs/) (Tauri alternative) (03:31) - [React Native Gesture Handler v3](https://blog.swmansion.com/introducing-gesture-handler-3-0-hook-based-api-deeper-reanimated-integration-more-9185b0c8e305) (04:20) - [Next polyfills improved WebStreams and upstreaming to Node](https://vercel.com/blog/we-ralph-wiggumed-webstreams-to-make-them-10x-faster) (05:25) - [Webpack 2026 roadmap](https://webpack.js.org/blog/2026-04-02-roadmap-2026/) (05:53) - [Lodash maintenance roadmap](https://socket.dev/blog/inside-lodash-security-reset) (07:07) - [Gatsby React 19 support](https://www.gatsbyjs.com/docs/reference/release-notes/v5.16/) , [styled-components RSC support](https://styled-components.com/releases#styled-components@6.3.0) (07:54) - [npmx.dev](https://npmx.dev/) (alternate NPM site UI) (08:43) - [eslint-plugin-react-render-types](https://github.com/HorusGoul/eslint-plugin-react-render-types) (typed children) (09:54) - Main Content (09:55) - React Core updates: (09:56) - [React Foundation officially launched](https://react.dev/blog/2026/02/24/the-react-foundation) (12:28) - Docs updates: [/`useActionState/`](https://github.com/reactjs/react.dev/pull/8284) (merged), [/`use/`](https://github.com/reactjs/react.dev/pull/8305) and [RSC sandboxes](https://github.com/reactjs/react.dev/pull/8300) (wip) (14:23) - [React Native 0.84 released](https://reactnative.dev/blog/2026/02/11/react-native-0.84) (17:47) - [Hermes WASM support](https://x.com/tmikov/status/2023821160241393839) , [Hermes Node compat CLI](https://x.com/tmikov/status/2024609186936660170) (18:43) - “State of…” survey results (18:43) - [State of JS 2025 results](https://2025.stateofjs.com/en-US) (19:06) - [State of React 2025 results](https://2025.stateofreact.com/en-US) (19:51) - [Aurora Scharff’s conclusion](https://2025.stateofreact.com/en-US/conclusion/) (20:44) - [Josh Comeau’s takes on the results](https://bsky.app/profile/joshwcomeau.com/post/3mf642css6227) (21:28) - [API pain points](https://2025.stateofreact.com/en-US/features/#main_apis_pain_points) (21:53) - [State of React Native 2025](https://results.2025.stateofreactnative.com/en-US/) (24:29) - [How we rebuilt Next.js with AI in one week](https://blog.cloudflare.com/vinext/) (29:52) - CloudFlare v Vercel beef (35:42) - Carl Vitullo monologs about AI Agents (42:27) - AI productivity and impacts on our attention (44:42) - ["wrote a spec, pointed Claude at an Asana board, and went home"](https://x.com/rvivek/status/2026385957596111044) (47:26) - [Bits AI SRE | Datadog](https://www.datadoghq.com/product/ai/bits-ai-sre/) (51:04) - [ThoughtWorks opines on AI productivity impacts](https://simonwillison.net/2026/Feb/14/thoughtworks/) (01:00:28) - ⚡ Lightning round ⚡ (01:00:37) - [“Wall Street Raider” game modernization](https://www.wallstreetraider.com/story.html) (and uses Preact) (01:01:16) - [Github Stacked Diffs preview](https://x.com/jaredpalmer/status/2019817235163074881) , [faster Issues search](https://github.blog/changelog/2026-01-29-improved-search-for-github-issues-in-public-preview/) (01:02:08) - [Josh Comeau: Sprite animations](https://www.joshwcomeau.com/animation/sprites/) (01:02:26) - [Interop 2026](https://wpt.fyi/interop-2026), ([WebKit](https://webkit.org/blog/17818/announcing-interop-2026/), [Igalia](https://www.igalia.com/news/interop-2026.html)) (01:03:38) - Conferences ([React](https://react.dev/community/conferences), [Javascript](https://confs.tech/javascript)) Reply on Bluesky ★ Support this podcast ★

    1h 6m
  3. 12/31/2025

    TMiR 2025-12: Year in review, React2Shell (RCE, DOS, SCE, oh my)

    Full transcript at Reactiflux Main Content React2Shell vulnerabilityInitial announcementFollowup denial-of-service CVE and source code exposure CVEVercel bulletinCloudflareCloudflare report on exploit attemptsCloudflare outage on December 5, 2025Tech analysis: “Flight Protocol”Vuln is carefully crafted Promise deserialization + `new Function` evalPRs: Initial fixes, Promise cycles / function toString, more Promise cyclesGuillermo’s breakdownShruti’s breakdownComms critique“React is rainbow colored (function types)”What does this mean for React and RSC adoption going forward?When I go back and look at react.dev now \[…\] it feels half-finishedReact Native year in reviewMore CSS supportExpo EAS hostingRN 0.78: React 19 supportLynx launchedRN 0.79: JSC moving to Community PackageRN 0.80: Freezing the legacy architectureRN 0.81: Android 16 support for edge to edge1.0 on the horizonVega OS launchedRN 0.82: Only new architectureExpo App AwardsRN 0.83: New Devtools - no breaking changesReact year in reviewCRA deprecation, new install docs (Vite\!)Styled Components DeprecatedReleases: 19.2 (Activity, useEffectEvent), Compiler 1.0Research: View Transitions canary, perf, concurrent stores, “throw a promise” deprecated (but not merged yet)“Async React” and the ecosystemReact FoundationReact growth skyrocketsReact Router RSC support, TanStack Start WIP RSC, WakuDan’s RSC explainers (he had a bunch of things to say)Remix v3 Jam recap (not React but relevant)Mark went from frustrated (CRA) to excited (ReactConf, foundation, team efforts)⚡ Lightning round ⚡ TS 7 progress updateNPM classic tokens revokedGitHub Actions planned workGithub Action pricing change and immediate about-faceStacked diffs proposal in the works?Anthropic bought BunSVG Clickjacking from Lyra (SVG filters as logic gates??)Dan Abramov’s RSC Explorer: https://rscexplorer.dev/ , https://overreacted.io/introducing-rsc-explorer/Instant-loading Github repo explorer using RSCs: Without the blue barReact Router’s Take on RSCsHow AI Coding Agents hid a Timebomb in Our App(https://acusti.ca/blog/2025/12/16/react-compiler-silent-failures-and-how-to-fix-them/)Great history of web dev: 30 Years of TagsNadia Makarevich’s latest deep dive: Bundle Size InvestigationExtensive ES2026 feature previewReact reconciler for Blender 3DThe “why” of React FiberAsync React articles from Aurora Scharff and Jack Herrington ★ Support this podcast ★

    1h 40m
  4. 11/30/2025

    TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs

    Transcript and show notes TMiR on Bluesky [00:13] Intro[01:00] New releases[01:04] BetterAuth 1.4[02:47] Immer 11, RTK 2.11[06:00] Storybook 10[06:22] 0.1 version of Remix team’s “event interaction” package[08:04] Main content[08:08] Ecosystem panel discussion of React Foundation at React Summit NY[14:46] React Concurrent Stores: Polyfill, React-Redux POC[17:52] React Router and transition usage[18:08] Matt Brophy and Ricky discussing nuances of behavior, use with React Router[22:53] The State of TanStack, Two Years of Full-Time OSS[25:57] TanStack DB 0.5[31:01] Tanner teasing a WIP TanStack Start RSC implementation[32:25] State of the web ecosystem[33:13] Cloudflare November outage postmortem[36:10] "What if people don't want to create things"[39:39] “When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”[45:53] Related, “Dead Framework Theory” from last month[48:12] Alex Russell’s latest stats on web devices and network budgets[51:48] Npm attack, Shai-Hulud round 2[52:06] Analysis of its evolution in code from Sept[55:23] Our plan for a more secure npm supply chain from September[55:29] NPM update on token management changes[55:34] ⚡ Lightning round ⚡[55:38] TS 6.0 hopefully Feb 2026, 7.0 (native) soon after (more details in the TypeScript.fm podcast)[56:03] Latest TC39 proposal updates[56:32] Chrome (and other browsers) wants to remove XSLT from the web platform[57:14] “Your URL is Your State”, and David K’s “Goodbye, useState” talk[57:46] Aiden Bai’s “React Grab” util[58:39] Creating a custom Node module loader to import from Bittorrent[59:22] Ryan Carniato’s stream on researching “async signals”[59:33] Details of building Node’s TS type stripping support[59:58] The Web Animation Performance Tier List[01:00:14] Conferences (React, Javascript)[01:00:22] CFPs[01:01:01] React Paris (Also a community survey)[01:01:12] JSWorld CFP closes Dec 31, notifies by Feb 1[01:01:18] Ending (00:00) - This Month in React - November Episode (SM) (00:13) - Intro (01:00) - New releases (01:04) - [BetterAuth 1.4](https://www.better-auth.com/blog/1-4) (02:47) - [Immer 11](https://github.com/immerjs/immer/releases/tag/v11.0.0), [RTK 2.11](https://github.com/reduxjs/redux-toolkit/releases/tag/v2.11.0) (06:00) - [Storybook 10](https://storybook.js.org/blog/storybook-10/) (06:22) - [0.1 version of Remix team’s “event interaction” package](https://github.com/remix-run/remix/tree/main/packages/interaction) (08:04) - Main content (08:08) - [Ecosystem panel](https://gitnation.com/contents/panel-discussion-the-future-of-react-and-its-ecosystem) discussion of React Foundation at React Summit NY (14:46) - React Concurrent Stores: [Polyfill](https://github.com/thejustinwalsh/react-concurrent-store), [React-Redux POC](https://github.com/reduxjs/react-redux/pull/2263) (17:52) - React Router and transition usage (18:08) - [Matt Brophy and Ricky discussing nuances of behavior, use with React Router](https://github.com/reactwg/async-react/discussions/5) (22:53) - [The State of TanStack, Two Years of Full-Time OSS](https://tanstack.com/blog/tanstack-2-years) (25:57) - [TanStack DB 0.5](https://tanstack.com/blog/tanstack-db-0.5-query-driven-sync) (31:01) - [Tanner teasing a WIP TanStack Start RSC implementation](https://x.com/tannerlinsley/status/1983999424486633931) (32:25) - State of the web ecosystem (33:13) - [Cloudflare November outage postmortem](https://blog.cloudflare.com/18-november-2025-outage/) (36:10) - ["What if people don't want to create things"](https://macwright.com/2025/10/21/what-if-they-dont-want-to.html) (39:39) - [“When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”](https://webtechnology.news/when-everyones-a-developer-how-do-we-promote-the-web-platform-over-react/) (45:53) - Related, [“Dead Framework Theory”](https://aifoc.us/dead-framework-theory/) from last month (48:12) - [Alex Russell’s latest stats on web devices and network budgets](https://infrequently.org/2025/11/performance-inequality-gap-2026/) (51:48) - Npm attack, [Shai-Hulud round 2](https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains) (52:06) - [Analysis of its evolution in code](https://www.aikido.dev/blog/bugs-in-shai-hulud-debugging-the-desert) from Sept (55:23) - [Our plan for a more secure npm supply chain](https://github.blog/...

    1h 3m
  5. 10/31/2025

    TMiR 2025-10: Post-conf; React 19.2, React Foundation, React Native removing old architecture. Next.js has too many directives

    Transcript and article links [00:00:00] Intro[00:00:46] New releases[00:00:49] Immer 10.2[00:01:55] ArkType ArkRegex (typed regex)[00:02:41] Main Content[00:02:45] React Conf[00:02:50] Official ReactConf 2025 Recap[00:02:57] Introducing the React Foundation (also from Linux Foundation, Meta engineering, and Seth Webster)[00:17:03] 19.2 (Activity, useEffectEvent)[00:17:27] React Native news[00:17:32] New architecture only from v0.82[00:18:52] Vega OS announcement[00:19:04] Vega introduction at React Conf[00:22:36] Joe Savona’s “Exploring React Performance” talk[00:23:26] Ricky’s “Async React Part I” and “Part II” (repo)[00:27:12] Async React Working Group[00:27:35] First discussion of more docs ideas[00:28:27] Remix v3 announcement[00:29:03] Announcement demo timestamped breakdown[00:31:28] Updates syntax can be customized?[00:34:44] I built the same app 10 times (code)[00:37:57] Same author as React Won by Default and It’s Killing Innovation[00:43:33] Solito 5[00:46:49] Next 16 and Directives debate[00:46:56] Next 16 released[00:49:41] Directives and the Platform Boundary[00:50:34] Technical critique of Next App Router: Everyone Hates Next.js[00:54:56] ⚡ Lightning round ⚡[00:54:58] ViteConf roundup[00:55:49] AWS Outage Postmortem[00:57:10] Voltra[00:58:10] Building fully native apps with EAS[00:58:52] React Native \ Imgui[00:59:53] Lodash maintenance foundation[01:00:45] Build Your Own Key-Value Database[01:02:24] Jared Palmer asking for GH PR suggestions and giving some technical details[01:03:54] Node 25 with JSON.stringify improvements[01:04:15]

    1h 14m
  6. 10/01/2025

    TMiR 2025-09: React 19.2 on the horizon; npm is still getting compromised

    [00:52] New releases[00:54] TanStack Start 1.0 RC![01:13] react-window 2.0 rewrite[01:44] Apollo Client 4.0[01:59] Redux Toolkit 2.9.0[02:47] Main Content[02:52] React 19.2 coming soon?[03:24] in canary, with docs[07:18] last React Labs post mention[11:43] useEffectEvent in canary and has docs[15:47] Compiler inferring function names[16:08] Docs for eslint-plugin-react-hooks, including rules and compiler issues[17:15] React Native 1.0 on the horizon[22:02] “React Won by Default – And It's Killing Frontend Innovation”[22:18] Inevitable HN argument[27:54] Ricky on Ryan Carniato’s stream talking about scheduling and demoing using modern React features[33:41] Server Components[33:44] React Router RSC framework mode preview[34:36] also middleware is now stable[34:44] Krasimir Tsonev’s “Can I Use RSC Today?” support matrix and experimental Forket “RSC without a framework” build tool[35:43] RSBuild support for RSCs[35:55] Useful post on parallel and recursive route rendering[36:35] All the NPM compromises and malware this month[39:47] npm package maintainer Qix[39:48] CrowdStrike npm Packages[40:16] GitHub Actions npm Token Theft[41:01] GitHub response[42:00] ⚡ Lightning round ⚡[42:03] Porting Modern TypeScript to Run on DOS[42:35] Cloudflare DDOSed themselves with a bad useEffect fetch[43:11] A very lovely writeup of the evolution of css zoom[43:56] What You Need to Know about Modern CSS[45:21] Fetch streams are great, but not for measuring upload/download progress[45:40] Why do browsers throttle JS timers?[46:01] “How Modern Browsers Work” deep dive, Addy Osmani[46:32] Biome: Stress-testing WIP noFloatingPromises lint rule[48:37] Bun: How bun install is so fast[49:23] Styled-Components fork for perf and React 19 compat[50:02] Vite SSR: Custom getStaticProps[50:11] Dominic Gannaway’s new framework Ripple[50:35] Remix v3: MJ hints “iframe-like async primitives”[51:57] React Native RFC to remove Old Architecture[52:28] Cloudflare’s new “Cap’n Web” RPC; GraphQL alternative?[55:26] Expo UI: Building SwiftUI apps[55:57] TanStack DB: An interactive guide[56:21] TS 6.0: may switch to strict options by default[57:28] Shopify’s RN New Architecture migration[57:42] The Bloat of Edge-Case First Libraries[58:51] Conferences (React, Javascript)[58:53] React Alicante Oct 2-4[59:13] React Conf is back, Oct 7-8 Las Vegas, NV, USA[59:29] Remix Jam, Oct 10, Toronto ON, CA[59:43] ViteConf Oct 9-10 Amsterdam, Netherlands[59:52] JSConf North America Oct 14-16 Chesapeake Bay, MD, USA[01:00:03] JSConf Chile Oct 24-25 Santiago, Chile[01:00:10] React Native London Oct 30-31[01:00:22] React India Oct 31 Nov 1 Goa, India[01:00:26] Wey Wey Web Nov 17-18 Malaga, Spain[01:00:39] React Summit Nov 18-21 New York, NY, USA[01:00:48] React Advanced Nov 28th, London UK (00:00) - This Month In React - September 2025 (SM) (00:52) - New releases (00:54) - [TanStack Start 1.0 RC!](https://tanstack.com/blog/announcing-tanstack-start-v1) (01:13) - [`react-window` 2.0 rewrite](https://react-window.vercel.app/) (01:44) - [Apollo Client 4.0](https://www.apollographql.com/blog/announcing-apollo-client-4-0) (01:59) - [Redux Toolkit 2.9.0](https://github.com/reduxjs/redux-toolkit/releases/tag/v2.9.0) (02:47) - Main Content (02:52) - [React 19.2 coming soon?](https://bsky.app/profile/ricky.fm/post/3lzt6yvs6o22r) (03:24) - ...

    1h 2m

About

How busy professionals stay on top of the React ecosystem. We give you a 1 hour recap of the latest news and nuance in React's development and ecosystem, upcoming conferences, and open source releases. New episodes the first week of every month, with live recordings on the last Wednesday of every month in the Reactiflux stage. Hosted Mark Erikson (Redux maintainer), Carl Vitullo (startup veteran), and Mo Khazali (head of mobile at Theodo). See something for us? Post to #tech-reads-and-news

You Might Also Like