react

This article details the discovery and disclosure of CVE-2025-5518 (React2Shell), a critical remote code execution vulnerability in React Server Components, explaining how researchers bypassed Flight protocol validations to access object prototypes.

React Doctor v2 is an open-source CLI tool that analyzes React codebases for performance issues, bad patterns, unnecessary re-renders, and broken architecture. It supports Next.js, Vite, and React Native and can be run instantly via npx.

Security researcher Lachlan discovered and reported a critical remote code execution vulnerability dubbed "React2Shell" in React's Server Components protocol to Meta on November 30, 2025. Meta released a fix and public advisory (CVE-2025-55182) on December 3, urging developers to update immediately as the vulnerability affected millions of websites built with React/Next.js.

A free tool has been released that can generate complex 3D particle effects from English instructions and directly output React or three.js code, lowering the barrier to 3D physics calculations.

This opinionated article aggressively advocates for using modern JavaScript frameworks like React over pure HTML for complex web applications, arguing that complexity requires proper tooling.

Discovered the open-source project open-slide, which uses the React framework to create PPTs. The workflow is specifically designed for AI Agents, supporting natural language slide generation, a visual editor, and brand logo integration.

Announcement of a course on React end-to-end testing with Playwright, covering browser automation, user journeys, auth, search, test setup, and debugging tips.

agent-browser v0.27 released with React introspection features, Web Vitals reporting, SPA navigation support, init scripts, network filtering, and cURL cookie import.

Forge is a comprehensive React toolkit designed specifically for building AI-powered applications.

Tailgrids 3.0 is an open-source React UI library designed for Tailwind CSS and AI workflows.

React Email 6.0 is an open-source email editor that can be embedded directly into your own application.

AutoClip是一个基于AI的智能视频切片处理系统，支持从YouTube和Bilibili自动下载视频、分析精彩片段并生成合集。

json-render is a Generative UI framework that enables the creation of dynamic, personalized UIs from natural language prompts using predefined components for safe and predictable output across multiple platforms.

Stremio Web is the official open-source web UI for the Stremio media center, built as a React app with a Rust core compiled to WebAssembly. It supports addons, cross-device sync, Chromecast, subtitles, and runs as an installable PWA.

Paperclip is an open-source Node.js server and React UI for orchestrating teams of AI agents—like a task manager for running autonomous businesses with budgets, governance, and multi-provider support.

Clypra is a free and open-source professional video editor built with Tauri v2, React 19, and Rust, offering hardware-accelerated processing and optional AI-powered features.

Next.js is an open-source web framework built by Vercel, extending React for full-stack applications with fast builds.

Meta open-sources Astryx, a customizable design system built on React and StyleX, featuring 150+ accessible components, CLI tooling, and AI-friendly APIs.

CopilotKit is a best-in-class SDK for building full-stack agentic applications with generative UI, shared state, and human-in-the-loop workflows, adopted by major companies like Google, LangChain, and AWS.

Vibe-Trading is an open-source personal trading agent that integrates with multiple broker APIs to provide a unified command-line and web interface for automated trading, supporting paper trading and real broker connectivity.