Episode 130 · Front-End Fire
130: TanStack Start Embraces RSC—Minus the Security Nightmares
2 Feb 2026 · 42 min
Episode notes
You heard it here first, folks, RSC support is now available in TanStack Start! Since TanStack Start supports not only React but also Solid, it handles serialization differently, meaning the critical security vulnerabilities RSC-enabled React apps have been suffering from lately won’t affect TanStack apps. Yarn 6 was recently announced, and (surprise, surprise) it’s going to be ported to Rust. Get ready for blazing fast installs, the ability to easily switch between Yarn versions, and lazy in...
Podcast
Front-End Fire
TJ VanToll, Paige Niedringhaus, Jack Herrington · Tech & Science · English
A weekly show that helps you stay up to date on the latest and greatest in the front-end world.
More from Front-End Fire All episodes →
-
E135 · 9 Mar 2026 · 45 min
135: Bun is Back in the Oven
This week's a non-AI episode! It’s been a minute since we last discussed Bun, but the team is back with a new release. In v1.3.10, the REPL’s completely rewritten in Zig, barrel imports are optimized, and the JavaScriptCore engine got upgraded for big perf gains. Npmx, a fast, modern browser for the npm registry has reached alpha version in less than 2 months of existence. Its goal is to make it easy for devs to find, evaluate, and manage npm packages, and boasts cool features like the abilit...
-
E134 · 2 Mar 2026 · 48 min
134: Anthropic is Having a Week
This week’s episode is all about Anthropic. First up, Anthropic unveiled Claude Remote Control, which will let users continue a Claude session back on their personal machine from a phone, tablet via the Claude mobile app. Watch out OpenClaw. Anthropic continued making news by refusing to bow to the Department of War’s request for “unrestricted use” of its AI for military purposes, including domestic surveillance and fully-autonomous weapons. We’ll let you know if those defense contracts get r...
-
E133 · 24 Feb 2026 · 50 min
133: State of React 2025: The Results Are In
It’s survey results reason, and the State of React 2025 results are in! As in the past, Next.js continues to dominate as one of the most used frameworks, but TanStack Start is one to watch. Other honorable mentions include: Zustand, Vite, and (most importantly) Front-end Fire tying for fifth place in the podcast section. Thank you, listeners! Google has a new proposal called WebMCP, which is a way to define structured tools for agents visiting a site, ensuring they can perform actions w...
-
E132 · 16 Feb 2026 · 59 min
132: What Developers Really Think: State of JS 2025 Survey Results
The State of JavaScript 2025 survey results are in this week, and there’s some givens and some surprises this year. Givens: Vite's still a favorites and devs want more native TS features. Surprises: ChatGPT usage declined, no one’s using Windsurf, and Bun is the third most-used JS runtime. And thanks for making us the most written-in podcast of the survey! We appreciate it! An 8 month study conducted by the Harvard Business Review reports AI tools don’t shrink work for employees, they actuall...
-
E131 · 9 Feb 2026 · 57 min
131: OpenClaw and the Wild West of Autonomous AI Agents
Malicious code is making its way into VS Code extensions this week, as two Chinese-based AI coding assistants are identified as capturing every file on a user’s computer and sending it to servers in China without their knowledge or consent. Please just be cautious about what you’re installing on your machines, folks. In related news, the Deno team has introduced Deno sandboxes to create and deploy secure, isolated VMs in the cloud. Strict permissions, network policies, directories, and isolat...
-
E129 · 26 Jan 2026 · 51 min
129: The Era of Humans Writing Code is Over
jQuery is the JavaScript library that just won’t quit. 20 years after its inception the team released jQuery 4.0.0, and it brings some notable modernizations including removed support for IE 10, a migration to ES modules, and support for Trusted Types. Node.js creator Ryan Dahl declared earlier this week that “the era of humans writing code is over”, and considering how good AI coding agents have gotten lately, he’s probably not wrong. Cloudflare also announces it has acquired pop...
-
E128 · 19 Jan 2026 · 47 min
128: What the Heck is a Ralph Wiggum Loop?
A new year, a new tactic to stem the flow of npm supply chain attacks. This time, the proposal is for “Staged Publishing” which introduces a review window that a package owner must approve before a package release becomes publicly available. Vercel Labs is out with a new AI tool called json-render that lets users generate dashboards, widgets, apps, and data visualizations from prompts, and constrains the response to JSON for only components pre-defined by the user. Finally, The Simpsons chara...
-
E127 · 12 Jan 2026 · 47 min
127: Are People Leaving Next.js for TanStack Start?
We’re back with our first episode of 2026, and prominent software developer and YouTuber, Theo Browne, made waves recently when he announced he’d migrated his T3 Chat app from the Next.js framework to TanStack Start. It isn’t that Next.js is bad, but that the requirements of T3 Chat were better supported by TanStack Start’s architecture, and Theo breaks down his evaluation process to reach that decision. For the 10th year in a row, the JavaScript Rising Stars report drops, and the most popula...
-
E126 · 22 Dec 2025 · 52 min
126: The 2025 Holiday Spectacular
It’s that time of year again: the holidays are nearly upon us and 2026 is fast approaching, so it’s time for our year end holiday spectacular! This year our past predictions for the future of web development come back to haunt us, we make some bold new proclamations for what’s in store for 2026, and of course, share what’s made us happy this year. Our past predictions were pretty hit or miss. Although a surge in popularity for simpler frontend frameworks like SolidJS and a whole slew of new w...
-
E125 · 15 Dec 2025 · 41 min
125: The RSC Vulnerabilities Keep Coming
Hot on the heels of the first critical vulnerability discovered in React applications using RSCs last week, two more vulnerabilities have surfaced, which is not uncommon. Even if you already updated for the critical vulnerability, you will need to update again. In lighter news, Anthropic donates MCP to the Agentic AI Foundation, just one year after introducing it to the world. MCP’s rise has been meteoric: 10,000 active public MCP servers, adoption by ChatGPT, Cursor, Gemini, Copilot, VS Code...
