#8: TanStack Weekly: TS Meta, Skills, and Security Updates

Hey devs,

Lets unwrap what happened last week in the TanStack ecosystem.

How to Steal Any React Component

David Fant published a fascinating deep dive into how React components can be reconstructed from production websites.

The trick relies on React Fiber data exposed via React DevTools

With that data, you can infer structure, props, and behavior of almost any component.

Read the full breakdown with great visuals here: https://fant.io/react/

React Paris 2026: Europe's Trendiest React Event

#sponsored

Two single-track days of deep React expertise in Paris (March 26–27).

With 50% SOLD OUT, grab 10% off your in-person pass and join the talks, the hallway track, and the community at Pullman Paris Montparnasse. 

Use the code rp26_tanstack for 10% off: https://react.paris/

Upcoming Package: TanStack Meta

A new package is in the works: TanStack Meta.

It provides composable utilities for managing metadata and SEO in TanStack Router / Start apps.

Follow the progress in the PR: https://github.com/TanStack/router/pull/6277

The Rise of AI Skills

The last weeks marked a clear peak in AI Skills adoption.

AI Skills are Markdown-based best practices that you can install to enhance AI agents abilities.

Vercel, Supabase, and Resend have all released their own skills.

Explore available skills here: https://skills.sh/

AI Video Generation with React and Remotion

Remotion, the React-based video framework, went viral after releasing AI skills.

Their X post hit over 14M views with creators sharing impressive AI-generated motion designs.

The new Remotion skill enables creating videos directly from prompts.

Watch a demo from Jonny Burger here: https://www.youtube.com/watch?v=Xtd4DjU9AU8

React Security Update

A new React vulnerability, CVE-2026-23864, affects RSC-related packages.

Multiple denial-of-service issues were found and patched in all React minor versions.

All RSC frameworks may be impacted if not updated.

Read the advisory and update now: https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg

If you enjoyed this issue, feel free to share it using the link below:

https://www.tanstackweekly.com/issues/67d6a75e-7157-4e4f-b914-80956ac3fc1a/

Or consider supporting the newsletter by becoming a sponsor :

https://www.tanstackweekly.com/sponsor

Until next week,

Josef Bender

YouTube | Blog | X | TanStack Weekly | Unsubscribe | Submit Content

P.O. Box 600221, 22202 Hamburg, Germany