TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs

Transcript and show notesTMiR on Bluesky[00:13] Intro[01:00] New releases[01:04] BetterAuth 1.4[02:47] Immer 11, RTK 2.11[06:00] Storybook 10[06:22] 0.1 version of Remix team’s “event interaction” package[08:04] Main content[08:08] Ecosystem panel discussion of React Foundation at React Summit NY[14:46] React Concurrent Stores: Polyfill, React-Redux POC[17:52] React Router and transition usage[18:08] Matt Brophy and Ricky discussing nuances of behavior, use with React Router[22:53] The State of TanStack, Two Years of Full-Time OSS[25:57] TanStack DB 0.5[31:01] Tanner teasing a WIP TanStack Start RSC implementation[32:25] State of the web ecosystem[33:13] Cloudflare November outage postmortem[36:10] "What if people don't want to create things"[39:39] “When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”[45:53] Related, “Dead Framework Theory” from last month[48:12] Alex Russell’s latest stats on web devices and network budgets[51:48] Npm attack, Shai-Hulud round 2[52:06] Analysis of its evolution in code from Sept[55:23] Our plan for a more secure npm supply chain from September[55:29] NPM update on token management changes[55:34] ⚡ Lightning round ⚡[55:38] TS 6.0 hopefully Feb 2026, 7.0 (native) soon after (more details in the TypeScript.fm podcast)[56:03] Latest TC39 proposal updates[56:32] Chrome (and other browsers) wants to remove XSLT from the web platform[57:14] “Your URL is Your State”, and David K’s “Goodbye, useState” talk[57:46] Aiden Bai’s “React Grab” util[58:39] Creating a custom Node module loader to import from Bittorrent[59:22] Ryan Carniato’s stream on researching “async signals”[59:33] Details of building Node’s TS type stripping support[59:58] The Web Animation Performance Tier List[01:00:14] Conferences (React, Javascript)[01:00:22] CFPs[01:01:01] React Paris (Also a community survey)[01:01:12] JSWorld CFP closes Dec 31, notifies by Feb 1[01:01:18] Ending (00:00) - This Month in React - November Episode (SM)(00:13) - Intro(01:00) - New releases(01:04) - [BetterAuth 1.4](https://www.better-auth.com/blog/1-4)(02:47) - [Immer 11](https://github.com/immerjs/immer/releases/tag/v11.0.0), [RTK 2.11](https://github.com/reduxjs/redux-toolkit/releases/tag/v2.11.0)(06:00) - [Storybook 10](https://storybook.js.org/blog/storybook-10/)(06:22) - [0.1 version of Remix team’s “event interaction” package](https://github.com/remix-run/remix/tree/main/packages/interaction)(08:04) - Main content(08:08) - [Ecosystem panel](https://gitnation.com/contents/panel-discussion-the-future-of-react-and-its-ecosystem) discussion of React Foundation at React Summit NY(14:46) - React Concurrent Stores: [Polyfill](https://github.com/thejustinwalsh/react-concurrent-store), [React-Redux POC](https://github.com/reduxjs/react-redux/pull/2263)(17:52) - React Router and transition usage(18:08) - [Matt Brophy and Ricky discussing nuances of behavior, use with React Router](https://github.com/reactwg/async-react/discussions/5)(22:53) - [The State of TanStack, Two Years of Full-Time OSS](https://tanstack.com/blog/tanstack-2-years)(25:57) - [TanStack DB 0.5](https://tanstack.com/blog/tanstack-db-0.5-query-driven-sync)(31:01) - [Tanner teasing a WIP TanStack Start RSC implementation](https://x.com/tannerlinsley/status/1983999424486633931)(32:25) - State of the web ecosystem(33:13) - [Cloudflare November outage postmortem](https://blog.cloudflare.com/18-november-2025-outage/)(36:10) - ["What if people don't want to create things"](https://macwright.com/2025/10/21/what-if-they-dont-want-to.html)(39:39) - [“When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”](https://webtechnology.news/when-everyones-a-developer-how-do-we-promote-the-web-platform-over-react/)(45:53) - Related, [“Dead Framework Theory”](https://aifoc.us/dead-framework-theory/) from last month(48:12) - [Alex Russell’s latest stats on web devices and network budgets](https://infrequently.org/2025/11/performance-inequality-gap-2026/)(51:48) - Npm attack, [Shai-Hulud round 2](https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains)(52:06) - [Analysis of its evolution in code](https://www.aikido.dev/blog/bugs-in-shai-hulud-debugging-the-desert) from Sept(55:23) - [Our plan for a more secure npm supply chain](https://github.blog/...