TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs

Transcript and show notes TMiR on Bluesky [00:13] Intro [01:00] New releases [01:04] BetterAuth 1.4 [02:47] Immer 11, RTK 2.11 [06:00] Storybook 10 [06:22] 0.1 version of Remix team’s “event interaction” package [08:04] Main content [08:08] Ecosystem panel discussion of React Foundation at React Summit NY [14:46] React Concurrent Stores: Polyfill, React-Redux POC [17:52] React Router and transition usage [18:08] Matt Brophy and Ricky discussing nuances of behavior, use with React Router [22:53] The State of TanStack, Two Years of Full-Time OSS [25:57] TanStack DB 0.5 [31:01] Tanner teasing a WIP TanStack Start RSC implementation [32:25] State of the web ecosystem [33:13] Cloudflare November outage postmortem [36:10] "What if people don't want to create things" [39:39] “When Everyone’s a Developer, How Do We Promote the Web Platform Over React?” [45:53] Related, “Dead Framework Theory” from last month [48:12] Alex Russell’s latest stats on web devices and network budgets [51:48] Npm attack, Shai-Hulud round 2 [52:06] Analysis of its evolution in code from Sept [55:23] Our plan for a more secure npm supply chain from September [55:29] NPM update on token management changes [55:34] ⚡ Lightning round ⚡ [55:38] TS 6.0 hopefully Feb 2026, 7.0 (native) soon after (more details in the TypeScript.fm podcast) [56:03] Latest TC39 proposal updates [56:32] Chrome (and other browsers) wants to remove XSLT from the web platform [57:14] “Your URL is Your State”, and David K’s “Goodbye, useState” talk [57:46] Aiden Bai’s “React Grab” util [58:39] Creating a custom Node module loader to import from Bittorrent [59:22] Ryan Carniato’s stream on researching “async signals” [59:33] Details of building Node’s TS type stripping support [59:58] The Web Animation Performance Tier List [01:00:14] Conferences (React, Javascript) [01:00:22] CFPs [01:01:01] React Paris (Also a community survey) [01:01:12] JSWorld CFP closes Dec 31, notifies by Feb 1 [01:01:18] Ending (00:00) - This Month in React - November Episode (SM) (00:13) - Intro (01:00) - New releases (01:04) - [BetterAuth 1.4](https://www.better-auth.com/blog/1-4) (02:47) - [Immer 11](https://github.com/immerjs/immer/releases/tag/v11.0.0), [RTK 2.11](https://github.com/reduxjs/redux-toolkit/releases/tag/v2.11.0) (06:00) - [Storybook 10](https://storybook.js.org/blog/storybook-10/) (06:22) - [0.1 version of Remix team’s “event interaction” package](https://github.com/remix-run/remix/tree/main/packages/interaction) (08:04) - Main content (08:08) - [Ecosystem panel](https://gitnation.com/contents/panel-discussion-the-future-of-react-and-its-ecosystem) discussion of React Foundation at React Summit NY (14:46) - React Concurrent Stores: [Polyfill](https://github.com/thejustinwalsh/react-concurrent-store), [React-Redux POC](https://github.com/reduxjs/react-redux/pull/2263) (17:52) - React Router and transition usage (18:08) - [Matt Brophy and Ricky discussing nuances of behavior, use with React Router](https://github.com/reactwg/async-react/discussions/5) (22:53) - [The State of TanStack, Two Years of Full-Time OSS](https://tanstack.com/blog/tanstack-2-years) (25:57) - [TanStack DB 0.5](https://tanstack.com/blog/tanstack-db-0.5-query-driven-sync) (31:01) - [Tanner teasing a WIP TanStack Start RSC implementation](https://x.com/tannerlinsley/status/1983999424486633931) (32:25) - State of the web ecosystem (33:13) - [Cloudflare November outage postmortem](https://blog.cloudflare.com/18-november-2025-outage/) (36:10) - ["What if people don't want to create things"](https://macwright.com/2025/10/21/what-if-they-dont-want-to.html) (39:39) - [“When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”](https://webtechnology.news/when-everyones-a-developer-how-do-we-promote-the-web-platform-over-react/) (45:53) - Related, [“Dead Framework Theory”](https://aifoc.us/dead-framework-theory/) from last month (48:12) - [Alex Russell’s latest stats on web devices and network budgets](https://infrequently.org/2025/11/performance-inequality-gap-2026/) (51:48) - Npm attack, [Shai-Hulud round 2](https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains) (52:06) - [Analysis of its evolution in code](https://www.aikido.dev/blog/bugs-in-shai-hulud-debugging-the-desert) from Sept (55:23) - [Our plan for a more secure npm supply chain](https://github.blog/...