Cody

If you are running a vulnerable Next.js or RSC app behind Cloudflare or other WAF, but your origin is still accessible directly from the internet then you are not protected! Attackers are iterating IP addresses so you will probably be found. Upgrade right now!

Route Caching by ascorbic · Pull Request #1245 · withastro/roadmap Summary A platform-agnostic route caching API for Astro SSR pages that enables declarative cache control using web standards. Examples Basic route caching --- // src/pages/products/[id].astro impor...

Finally got around to digest the RFC and share my thoughts github.com/withastro/ro...

It's ok we're all sinners here

You Might Not Need an Effect – React The library for web and native user interfaces

A lot of you need to read react.dev/learn/you-mi... and it shows

Unfortunately unlikely, by the time I started high school my family had moved to Lofoten 😔

The city of where I was born! 🥰

Gotcha. What I’ve skimmed so far looks on target. I’ll deep dive and share feedback next week 🙌

Component Tree highlighted with ✨ memo for components that have been auto-memoized by the compiler

✨ welcome to @sentry.io, React Compiler ✨

For sure, hoping I'll have time next week to dive in. Do you have an idea of when there's a POC we can test drive? 🙌

I’m extremely excited for how well this new api is shaping up to be. SanityLive on this setup will be S M O O O O T H 😤 🤌🤌🤌🤌🤌🤌

We are so back 🤌

GitHub - rickhanlonii/async-react: The final state of the React Conf 2025 Async React talk. The final state of the React Conf 2025 Async React talk. - rickhanlonii/async-react

Here's the code for my Async React demo:

github.com/rickhanlonii...

Picture of Ricky and Cody at the chandelier bar

Hyped for part 3 of @ricky.fm’s Async React

Glad you loved it! 💖 happy birthday 🥳

GitHub - e18e/awesome-e18e: A curated list of awesome e18e-focused packages A curated list of awesome e18e-focused packages. Contribute to e18e/awesome-e18e development by creating an account on GitHub.

we've started building out an "awesome" list for @e18e.dev 🎉

this should provide a good resource for finding modern libraries and tools. contributions welcome!

Last minute tweaks to the slides 🤏 got two looooong flights ahead 😮‍💨

We’ve been using the activity API at sanity since it was released as experimental to support multiple Iframes being mounted & unmounted whilst preserving their state & I’m really pleased at how fantastic it’s been.

Super stoked to come talk about what we’ve learned from using it in production ✨

@codey.bsky.social is giving a talk on React Compiler

We're hosting the official @nextjs.org Conf opening party 🎉

Can't make it to our *[NYC] event?
Don't worry—we'll be in SF too!

Oct 21, 7pm-midnight at Southern Pacific Brewing in the Mission.

Great food, drinks, games + the Next.js (and Sanity!) community.

Register below 👇🏻

More context here bsky.app/profile/rick...

phil 🫠 on X: "amazing to still see styled-components hidden in some codebases 👀 lots of differences from modern CSS approaches, but SC's ordering guarantees are still kinda neat also CSS-in-JS's perf would be even worse if this issue wouldn't have been fixed😂 https://t.co/oTy95EZkp2" / X amazing to still see styled-components hidden in some codebases 👀 lots of differences from modern CSS approaches, but SC's ordering guarantees are still kinda neat also CSS-in-JS's perf would be even worse if this issue wouldn't have been fixed😂 https://t.co/oTy95EZkp2

@kitten.sh re x.com/_philpl/stat... it explains why I could never reproduce github.com/reactwg/reac... nor react.dev/reference/re.... 🤯 I'd love to chat SC history with you if we cross paths, my interest in SC history is maybe above average (github.com/sanity-io/sa...) 😂 It's such an impressive proj

Ok you win, when can we have a client/SSR cache API? 🥺

Mitigating supply chain attacks | pnpm Sometimes npm packages are compromised and published with malware. Luckily, there are companies like [Socket], [Snyk], and [Aikido] that detect these compromised packages early. The npm registry usually removes the affected versions within hours. However, there is always a window of time between when the malware is published and when it is detected, during which you could be exposed. Fortunately, there are some things you can do with pnpm to minimize the risks.

Published an article about mitigating supply chain attacks with pnpm
pnpm.io/supply-chain...

trusted publishing is fantastic for ensuring that the state of a @github.com repo maps to a public package

... but maintainers are still vulnerable to phishing, allowing bypassing it

so: this action fails ci when upgrading to a 'non-provenanced' package

React Compiler oxc plugin · Issue #10048 · oxc-project/oxc I wanted to open an issue capturing some of our past discussion on adding support for React Compiler as an oxc plugin. For context, the React team reached out to both the swc and oxc projects a few...

I’m not aware of any limits to i18n nor css-in-js with the compiler?
Could you show me some examples?
On performance, long term this is likely improving github.com/oxc-project/... and short term next.js and rolldown are already implementing strategies to only run babel if the compiler is needed

React Compiler's memoization prevents fallbacks by stipsan · Pull Request #2 · jantimon/react-hydration-rules This is not meant to be merged as is, just sharing the findings that with memoization by React Compiler enabled it seems to pass all the tests 🤯

Fascinating, it looks like when using React Compiler memoization is able to save us from these edge cases 🤯 github.com/jantimon/rea...

I would love to learn more about this. Is there a sandbox or gist I could look at that demonstrates this? 🙌

The API calls were managed by a React useEffect hook, but we mistakenly included a problematic object in its dependency array.

Can't believe what I'm reading. Accidentally DDoS yourself because you fetch in useEffect in 2025 is so avoidable 😂

blog.cloudflare.com/deep-dive-in...

cool post!