Ricky

@ricky.fm

React core team • Forbes 30 worst over 30

... i have joined the @nextjs.org team at @vercel.com. for a start, i'll be working part-time, so please don’t flood me with bug reports yet. however, i’ll try to keep an eye on them as i want to understand what problems Next.js users are running into every day. i want App Router to get good!

We’re pretty close to having an initial Rust port of React Compiler. My approach was to iterate on the plan document (write it manually, have the agent expand, edit, repeat). Then try to run it, see what goes wrong, revert back to the plan, tweak the plan, repeat.

Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week. These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.

People give `useEffect` a bad rap, but it isn't usually the source of the problem. The real problem is too many `useState`s. Devs fail to see how their data is connected and model it too discretely. As those connections appear, it is easier to synchronize than refactor the model. 1/

aargh someone kill me. literally THE WHOLE POINT of directives is that they’re not just strings! they’re syntactically attached to the scope (function or module) in a way that’s reflected in AST. and both RSC and Next.js ones act at module boundary which is kinda gross for decorators or API calls

This event also led to various discussions in the community, following the introduction of parametrized directives (’use cache: private’ / ’use cache: remote’), and the introduction of a Vercel ’use workflow’ directive the next day. Many developers argue it’s dangerous to use strings and would prefer function decorators or explicit typesafe API calls. We still need to think about it before making up our minds and taking a side, but here are some related links worth checking out: