PodRocket

In this engaging discussion, Tanner Linsley, a frontend engineer and the mastermind behind libraries like React Query, delves into the evolution of TanStack. He explains the significance of virtualized lists for performance and why forms pose challenges in React. Tanner introduces TanStack Start, highlighting its client-first approach to data handling. He also shares insights on React Server Components, composable tools, and the future roadmap for TanStack, including AI, DevTools, and sustainable support for open-source initiatives.

In this episode, Noel sits down with David Mytton, founder and CEO of Arcjet, to unpack the React2Shell vulnerability and why it became such a serious remote code execution risk for apps using React server components and Next.js. They explain how server-side features introduced in React 19 changed the attack surface, why cloud providers leaned on WAF mitigation instead of instant patching, and what this incident reveals about modern JavaScript supply chain risk. The conversation also covers dependency sprawl, rushed patches, and why security as a feature needs to start long before production. Links X: https://x.com/davidmytton Blog: https://davidmytton.blog Resources Multiple Threat Actors Exploit React2Shell: https://cloud.google.com/blog/topics/threat-intelligence/threat-actors-exploit-react2shell-cve-2025-55182 We want to hear from you! How did you find us? Did you see us on Twitter? In a newsletter? Or maybe we were recommended by a friend? Fill out our listener survey! https://t.co/oKVAEXipxu Let us know by sending an email to our producer, Elizabeth, at elizabeth.becz@logrocket.com, or tweet at us at PodRocketPod. Check out our newsletter! https://blog.logrocket.com/the-replay-newsletter/ Follow us. Get free stickers. Follow us on Apple Podcasts, fill out this form, and we’ll send you free PodRocket stickers! What does LogRocket do? LogRocket provides AI-first session replay and analytics that surfaces the UX and technical issues impacting user experiences. Start understanding where your users are struggling by trying it for free at LogRocket.com. Try LogRocket for free today. Chapters

Eytan Seidman, VP of Product at Shopify, dives into the exciting features of Winter '26, focusing on AI's role in enhancing developer experiences. He explains the power of the Dev MCP server for rapid app development and highlights tools like Cursor and Claude Desktop for streamlining processes. Eytan also discusses the innovative Sidekick, which integrates apps to improve merchant tools. Plus, the new analytics API opens fresh possibilities for tracking and improving store performance. It's a treasure trove of insights for developers and merchants alike!

Shruti Kapoor, a staff engineer and educator expert in React, dives into the latest features of React 19.2. She breaks down innovations like Activity for easy state restoration and View Transitions for seamless animations. The discussion covers useEffectEvent for better event handling and cacheSignal for efficient server interactions. Shruti also touches on new Chrome DevTools performance tracks and the stable React Compiler, making your development experience smoother. It's an insightful look into React's evolution!

Dominik Dorfmeister, a software engineer at Sentry and open source maintainer, dismantles common React myths around useCallback and useMemo. He reveals how these hooks often complicate rather than enhance performance. Dominik discusses the React Compiler's potential, advocating for the latest ref pattern as a simpler alternative. He warns about the dangers of overusing memoization and emphasizes that clarity and maintainability should trump micro-optimizations. Listeners will gain insights on improving code reviews and optimizing team practices.

Will Madden, Senior Engineering Manager for the Prisma ORM team, shares insights into Prisma v7's exciting evolution. He discusses the significant shift from Rust to TypeScript, enhancing performance and predictability with less 'magic' involved. Will dives into improvements in Prisma Studio, better compatibility with serverless environments, and how JavaScript ORM tools will shape future coding workflows aided by language models. Don’t miss his perspective on how these changes lay the foundation for an adaptable, developer-friendly ORM.

The hosts discuss the latest GitHub Octoverse report and the rise of TypeScript as the top programming language. They explore how Copilot impacts code quality and contributor burnout, alongside a concerning drop in code review comments. The conversation delves into the need for corporate support in open source projects, emerging AI vulnerabilities, and the growing importance of local AI models like Ollama. They also address the potential for AI to streamline development tasks but warn of the governance gaps in open source.

Barry Pollard, a Chrome DevRel engineer specializing in web performance, dives into the speculation rules API. He explains how this groundbreaking feature enhances the speed of multi-page and e-commerce sites through prefetching and pre-rendering. Topics include the history of speculative loading, the contrast between SPA and MPA behaviors, and the nuances of conservative prefetch strategies. Barry also discusses the API's adoption by platforms like Shopify and WordPress, potential risks for developers, and performance gains observed from early adopters.

TJ Van Toll, a principal developer advocate, Jack Herrington, a blue-collar coder and YouTuber, and Noel Minchow, a software engineer at LogRocket, dive into Remix v3's unique features and its departure from React. They explore the implications of the new H-1B $100,000 fee on tech hiring and discuss the reactions from companies. The trio also debates the merits of Firefox versus Chrome, a spicy Tailwind CSS critique, and the impact of LLMs on CSS generation. Tune in for tech insights and hot takes!

Dominic Gannaway, the author and maintainer of Ripple.js, shares insights into this innovative TypeScript-first UI framework designed for clarity and reactivity. He discusses Ripple's unique templating language, how it avoids global state, and the benefits of fine-grained updates through a track and block system. Dominic also highlights the developer experience, including tooling like Prettier, and reveals how AI has influenced Ripple's development. With exciting plans for server-side rendering and community contributions, Ripple aims to reshape how frameworks are built.