130: TanStack Start Embraces RSC—Minus the Security Nightmares

10 snips

Feb 2, 2026

They dig into TanStack Start adding React Server Components and why its server-function design avoids risky flight payloads. They cover Yarn moving to Rust and what that means for package managers. Rolldown 1.0 hitting release candidate and its Rollup compatibility get attention. The group also unpacks recent RSC CVEs and how flight data can open security risks.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

INSIGHT

TanStack Start Adds RSC With Safer Defaults

TanStack Start will support React Server Components before 1.0 and offer both low-level and composite slot-based APIs.
Jack Harrington highlights this as feature-parity with Next.js while avoiding recent RSC security CVEs.

ADVICE

Try TanStack Start Early And Use Adapters

Try TanStack Start once it releases this week and test its API before 1.0 stabilizes.
Use the Cloudflare or Netlify adapters or Nitro for broader deployment flexibility.

ADVICE

Prepare For Yarn's Rust Rewrite

Expect Yarn to be rewritten in Rust over the next six to eight months and plan migrations accordingly.
For now, continue using your current package manager (npm, pnpm, Bun) until Yarn 6 stabilizes.

Get the Snipd Podcast app to discover more snips from this episode