This Week In React 290:
βοΈ
- Suspense
- Working Group
- Next.js
- React Router
- Storybook
- Astryx
π±
- Mediaqueries
- ViewTransition
- Platform.Variant
- Screens
- Nitro
- KeyboardController
- Skia
πΏ Read: thisweekinreact.com/newsletter/290
βοΈ: @Konrad_Armatys @banys0 @swmansion
β’ βοΈ Stay up-to-date with React
β’ π‘ High signal, no drama
β’ π₯ Join 42k React devs - 1 email/week
β’ π¨ ThisWeekInReact.com
β’ By @sebastienlorber
- This is one of the most exciting features to look forward in React Don't sleep on it!π <React.Fragment ref> This API is really exciting, unlocking many new composition patterns - Already available in Canary - OSS flag enabled, so likely coming in v19.3? - Coming in RN too! Recently, it has been more exhaustively documented: react.dev/reference/reacβ¦
- The React Compiler in Rust is coming in every tool! π₯°This Week In React 286 βοΈ - React Compiler in Rust - StyleX - TSRX - TanStack - Hydrogen - WordPress - Remotion π± - RN 0.86 - Enriched HTML - Gesture Handler - Compressor - Morph View - Hermes πΏ Read/subscribe: thisweekinreact.com/newsletter/286 βοΈ @jaworek3211 & I
- π npm v12 blocks postinstall scripts by default You should celebrate ) even if you don't use npm Surprisingly, this also improves supply chain security for pnpm, Yarn, Bun and other ecosystems such as PyPi => it reduces the ability for npm / multi-ecosystem worms to spreadJS devs - Time to celebrate π π₯ All modern package managers will block postinstall scripts by default : π¦ npm v12 π π¦ pnpm 10 π¦ Yarn 4.14 π¦ Bun π¦ Deno π¦ Aube This doesn't solve everything, but should greatly reduces the ability for supply chain worms to spread
- Major milestone for the npm ecosystem All widely used package managers will soon block postinstall scripts by default!β€οΈ npm + Supply chain security => improving now! π€© π¦ npm v11.16 - Phase 1 - PR merged - package.allowScripts = [] - Warns on unapproved postinstall script π¦ npm v12.0 - Phase 2 - Upcoming PR π - Blocks unapproved postinstall scripts by default π


