TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs

Transcript and show notesTMiR on Bluesky[00:13] Intro[01:00] New releases[01:04] BetterAuth 1.4[02:47] Immer 11, RTK 2.11[06:00] Storybook 10[06:22] 0.1 version of Remix team’s “event interaction” package[08:04] Main content[08:08] Ecosystem panel discussion of React Foundation at React Summit NY[14:46] React Concurrent Stores: Polyfill, React-Redux POC[17:52] React Router and transition usage[18:08] Matt Brophy and Ricky discussing nuances of behavior, use with React Router[22:53] The State of TanStack, Two Years of Full-Time OSS[25:57] TanStack DB 0.5[31:01] Tanner teasing a WIP TanStack Start RSC implementation[32:25] State of the web ecosystem[33:13] Cloudflare November outage postmortem[36:10] "What if people don't want to create things"[39:39] “When Everyone’s a Developer, How Do We Promote the Web Platform Over React?”[45:53] Related, “Dead Framework Theory” from last month[48:12] Alex Russell’s latest stats on web devices and network budgets[51:48] Npm attack, Shai-Hulud round 2[52:06] Analysis of its evolution in code from Sept[55:23] Our plan for a more secure npm supply chain from September[55:29] NPM update on token management changes[55:34] ⚡ Lightning round ⚡[55:38] TS 6.0 hopefully Feb 2026, 7.0 (native) soon after (more details in the TypeScript.fm podcast)[56:03] Latest TC39 proposal updates[56:32] Chrome (and other browsers) wants to remove XSLT from the web platform[57:14] “Your URL is Your State”, and David K’s “Goodbye, useState” talk[57:46] Aiden Bai’s “React Grab” util[58:39] Creating a custom Node module loader to import from Bittorrent[59:22] Ryan Carniato’s stream on researching “async signals”[59:33] Details of building Node’s TS type stripping support[59:58] The Web Animation Performance Tier List[01:00:14] Conferences (React, Javascript)[01:00:22] CFPs[01:01:01] React Paris (<a href="http