TanStack
TrialTools
An open-source collection of UI and data-fetching libraries for web applications.
Why it's here
Placed in Trial: 6 article(s) of evidence from 3 source(s), led by framework updates, with 2 in the last 30 days. Confidence 63%.
Evidence (6)
- 7Hacker News·9/17/2026securityCrowdSec Confirms Private GitHub Repository Source Code Leak
CrowdSec said a source code leak affected its private GitHub repositories in May 2026 and was confirmed after a report in September. The company said no client data or PII was exposed, rotated credentials, and believes the leak likely came through a backdoored TanStack-related component used briefly in its environment.
- 5InfoQ·9/17/2026product_launchTanStack Charts Debuts as a Framework-Agnostic TypeScript Visualization Library
TanStack Charts is a new framework-agnostic visualization library for TypeScript that lets developers build charts by composing components rather than relying on fixed chart types. The project is currently in alpha, supports multiple frameworks, and reports about 160,000 weekly downloads, but it is not yet ready for production use.
- 5InfoQ·8/20/2026framework_updateLocal-First Apps with Sync-Driven Architecture
James Arthur argues that sync is becoming a key frontend architecture pattern, replacing imperative fetching with declarative data bindings. He describes how Electric and TanStack DB extend reactivity to the server, enabling query-driven sync, local optimistic updates, and faster collaborative applications on existing stacks.
- 6InfoQ·8/19/2026framework_updateReact Router v8 ships with ESM-only builds and default middleware
React Router v8 was released on June 17, 2026 with limited breaking changes and updated baselines. The release moves to ESM-only builds and enables default middleware, while React Router v6 and Remix v2 have reached end of life.
- 5InfoQ·7/27/2026framework_updateTanStack Table V9 Beta adds tree-shakable features and lower memory use
TanStack Table V9 is now in beta with a new opt-in feature model that lets developers include only the parts they need. The release also improves state management through TanStack Store, aims to reduce memory usage, and provides gradual migration tools for existing users.
- 7OpenAI Blog·5/13/2026securityOpenAI responds to TanStack npm supply chain attack
OpenAI says it has responded to the TanStack "Mini Shai-Hulud" npm supply chain attack by securing systems and protecting signing certificates. The company also said macOS users must update OpenAI apps by June 12, 2026, as part of its mitigation steps against the incident.