News for hackers. Stuff that matters.

A comment on RCE Vulnerability in React and Next.js. Parent comment

Re:RCE Vulnerability in React and Next.js by mxmzb on Thursday December 04, 2025 @03:51AM (#46145276)
Nobody is using Redux any more, and it's even publically discouraged by the creator. It's a legacy system and including it in your problems list just makes me think you have no React experience and no idea what you are talking about (beyond technical yapping also Redux as a product still achieved what it tried to solve so your dx doesn't even matter).

Firebase in this context is just a database and how you poll data on client or server from it. Nonsensical reference again.

[ Parent | on HN ]
Re:RCE Vulnerability in React and Next.js by halapro on Thursday December 04, 2025 @06:20AM (#46146306)
I love reading this while my boss is pushing "redux everything" as the next step in our (React 17) codebase...
[ Parent | on HN ]
Re:RCE Vulnerability in React and Next.js by acemarke on Thursday December 04, 2025 @04:35PM (#46153414)
Hi. I'm the current Redux maintainer, and have been since Dan handed it over to me in mid-2016, one year after he created Redux. It's also worth noting that Dan never used Redux on a real app (that I know of), whereas I've spent years maintaining Redux and Redux Toolkit and designing APIs based on the needs of our users.

Redux is still by far the most widely-used state management library in React apps. Some of that _is_ legacy usage, sure. But, our modern Redux Toolkit package has ~30M downloads a month. Zustand has become very popular as a client-side state option, and React Query is now the default standard data fetching tool, but you can see that even just RTK is still right up there in monthly NPM downloads:

- https://npm-stat.com/charts.html?package=redux&package=%40re...

I've frequently talked about the original reasons for Redux's creation, which of those are still relevant, and why Redux is still a very valid option to choose even for greenfield projects today:

- https://blog.isquaredsoftware.com/2024/07/presentations-why-...

[ Parent | on HN ]