---
title: "How to keep your package.json under control"
publication: "React Status"
issue: 444
published_at: "2025-09-17"
canonical_url: "https://react.statuscode.com/issues/444"
---
Plus Expo 54, a React 19 cheat sheet, and an unfortunate useEffect error. |
#444 — September 17, 2025
[Read on the Web](https://react.statuscode.com/issues/)
Together with [](https://coderabbit.link/cooperpress) ⚛️ React Status
[](https://blog.cloudflare.com/deep-dive-into-cloudflares-sept-12-dashboard-and-api-outage/)
[Cloudflare Dashboard Outage Rooted in a `useEffect` Mistake](https://blog.cloudflare.com/deep-dive-into-cloudflares-sept-12-dashboard-and-api-outage/) — The bug wasn’t caused by anything React-specific, but it’s uncommon to hear of the misuse of a React feature cascading into a service being overwhelmed with unnecessary requests resulting in an outage. A good reminder that these things can happen to anyone.
Lianza and Madruga (Cloudflare)
[How to Keep `package.json` Under Control](https://blog.val.town/gardening-dependencies) — Looking at an 863 megabyte `node_modules` folder in [Val Town](https://www.val.town/)’s React app, Tom got to thinking about ‘dependency hygiene’ and some ways to keep things under control. Good tips and tool recommendations for managing the bulk.
Tom MacWright [](https://coderabbit.link/cooperpress)
[AI Code Reviews Meet CLI Coding Agents](https://coderabbit.link/cooperpress) — CodeRabbit CLI brings instant code reviews directly to your terminal, integrating with Claude Code, Cursor CLI, and other AI agents. While they generate code, CodeRabbit ensures it's production-ready - catching bugs, security issues, and hallucinations before they hit your codebase.
CodeRabbit sponsor
[React Server Components Support Across Frameworks](https://rsc.krasimirtsonev.com/) — A comparison of support for aspects of the main RSC related functionality in Next.js, Vite, Waku, Forket, Parcel, React Router, and RedwoodSDK, along with [the code used to test each one](https://rsc.krasimirtsonev.com/#testcases) (which you might find useful as a reference in itself).
Krasimir Tsonev
**IN BRIEF:**
- `` is now available in React's _Canary_ release channel. You can [learn more about the feature here.](https://react.dev/blog/2025/04/23/react-labs-view-transitions-activity-and-more#activity) We also expect support to land in the next release of Next.js.
- The pnpm project has published [a post about mitigating supply chain attacks](https://pnpm.io/supply-chain-security) and [released pnpm 10.16](https://pnpm.io/blog/releases/10.16) with a new `minimumReleaseAge` setting to prevent the installation of packages younger than a certain age.
- Kent C. Dodds dropped [his React 19 cheat sheet](https://www.epicreact.dev/react-19-cheatsheet) a year ago and it remains useful and relevant.
- If you're a Vercel user, you might now be seeing [your builds start up to 30% faster.](https://vercel.com/changelog/builds-now-start-up-to-30-faster)
['React Won by Default – And It's Killing Frontend Innovation'](https://www.lorenstew.art/blog/react-won-by-default) — An opinionated React thought-piece that’s provoked much discussion this week by poking at the downsides and inertia caused by ‘the React-by-default mindset.’ And we thought people said React was moving too quickly..? 😅
Loren Stewart
📄 [Building ClickHouse-Powered APIs with React and MooseStack](https://clickhouse.com/blog/clickhouse-powered-apis-in-react-app-moosestack) – MooseStack is a framework for building real-time analytical backends. Fiveonefour and ClickHouse
📄 [Creating a 'Current Location' Map in Expo and React Native](https://spin.atomicobject.com/current-location-expo-react-native/) Louie Berwanger
📄 [Redux in 2025: A Reliable Choice for Complex React Projects](https://stefvanwijchen.com/react-and-redux-in-2025/) Stef van Wijchen
🔊 [Discord's Journey to React Native with Chas Jhin](https://infinite.red/react-native-radio/rnr-343-discords-journey-to-react-native-with-chas-jhin) React Native Radio Podcast
🛠 Code, Tools & Libraries
[](https://expo.dev/changelog/sdk-54)
[Expo SDK 54 Released: A Big One for React Native Developers](https://expo.dev/changelog/sdk-54) — The [_Expo_ framework](https://expo.dev/) continues its rapid ascent in the world of React Native with precompiled React Native iOS builds (for much shorter build times), iOS 26 and Liquid Glass support, and the use of React Native 0.81 and React 19.1. The new [Expo File System](https://expo.dev/blog/expo-file-system) has also become stable.
Hughes and Vatne (Expo)
📺 Simon Grimm has put together [a video walking through all the significant changes](https://www.youtube.com/watch?v=oWVie6GVI-I) in Expo 54 and why he's excited about it.
[Secure Your Agentic Apps with Auth for GenAI](https://auth0.com/signup?onboard_app=genai&ocid=7014z000001NyoxAAC-aPA4z0000008OZeGAM?utm_source=reactstatus&utm_campaign=global_mult_mult_all_ciam-dev_dg-plg_auth_native_reactstatus_newsletter_aud_ReactStatus-Q3-Newsletter_utm2&utm_medium=cpc&utm_id=aNKKZ00000004I44AI) — Secure your agentic apps with features like User Authentication for AI agents, Token Vault, and more with Auth0’s Auth for GenAI (exclusively in Developer Preview).
Auth0 sponsor
[Conform 1.10: A Type-Safe Form Validation Library](https://conform.guide/) — Gives you control over the form submission lifecycle from client to the server and exposes the form state through the `useForm()` hook. [v1.10](https://github.com/edmundhung/conform) improves [Valibot](https://valibot.dev/) integration with the future `useForm` hook.
Edmund Hung
💱 [React Currency Input Field Component v4.0](https://github.com/cchanxzy/react-currency-input-field) — A component that aims to capture the nuances of currency input, if a freeform approach doesn’t cut it for you. Try it out with [the live demo.](https://cchanxzy.github.io/react-currency-input-field/)
Chun Chan
- [React on Rails 16.0](https://github.com/shakacode/react_on_rails/blob/master/docs/release-notes/16.0.0.md) – A way to integrate React with _Ruby on Rails_apps.
- 🗓️ [DayPicker 9.10](https://github.com/gpbl/react-day-picker) – Component for creating date pickers, calendars, and date inputs.
- [TanStack Form 1.20](https://github.com/TanStack/form/releases/tag/v1.20.0) – Powerful, type-safe Web form state management.
- [TanStack Query 5.89](https://github.com/TanStack/query/releases/tag/v5.89.0) – Async state management and data fetching.
📰 Classifieds
[$100 off yearly Frontend Masters membership!](https://frontendmasters.com/sale/?utm_source=classified&utm_medium=email&utm_campaign=reactstatus) 250+ courses, personalized learning path, workshops with devs from GitHub & Netflix. [Sale ends soon →](https://frontendmasters.com/sale/?utm_source=classified&utm_medium=email&utm_campaign=reactstatus)
📢 Elsewhere in JavaScript
A roundup of some other interesting stories in the broader JavaScript landscape, in case you've missed them:
- ⚠️ The significant npm supply chain attack we mentioned last week [is continuing to spread, and has affected hundreds more packages.](https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages)
- _Dolt Workbench_ is a React-powered, Electron-packaged desktop app for working with SQL databases, and its team has [shared the full automated release process it uses](https://www.dolthub.com/blog/2025-09-11-automating-desktop-release-process/) to package and release the app across multiple platforms at once.
- [Safari 26.0 has been released](https://webkit.org/blog/17333/webkit-features-in-safari-26-0/) alongside macOS 26.0, iOS 26.0, etc. Along with a large variety of CSS enhancements and a new `` element for embedding 3D models onto web pages, every site can now "be a web app" on iOS and iPadOS if a user simply adds it to their home screen.
- [Feedsmith 2.0 has been released](https://feedsmith.dev/) – it's a fast, all-in-one library for both parsing and generating web feeds (RSS, Atom, etc.)
- Someone figured out how to [host a web site on a disposable vaping device.](https://bogdanthegeek.github.io/blog/projects/vapeserver/) The author references React briefly, saying that the vape's 20KB of RAM may not be enough for our purposes.. 😅
- [Bun v1.2.22 was released.](https://bun.com/blog/bun-v1.2.22)
Curated by Peter Cooper and Terence C. Gannon.
A **[Cooperpress](https://cooperpress.com/)** publication.
[Change your email address](https://react.statuscode.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://react.statuscode.com/leave/*|UID|*)
© Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom