👋 We're taking a week off next week, so we'll be back on Friday, October 9. __ Your editor, Peter Cooper | Fewer Findings. Only Real Risks — AI-generated code can introduce vulnerabilities that are easy to miss in a pull request. CodeRabbit Security continuously reviews your codebase for complex bugs and security risks, using full-codebase context to follow data flows, dependencies, and patterns beyond the latest diff. CodeRabbit sponsor | 💡 The runtime is a fraction of React's size, but the trade-off is no concurrent rendering (this Japanese blog post has a nice look into that). There's also no license yet, and it can be considered experimental. | | React-Redux 9.4 Alpha Adds Opt-In useSignalSelector — Redux runs every mounted selector on every dispatch, which gets costly in huge apps. The new opt-in, signals-based useSignalSelector tracks which state each selector reads, so a dispatch only re-runs selectors whose data changed. Mark Erikson | 💡 Alpha 0, above, has the full explainer, but Alpha 1 landed yesterday with a key bugfix and corrected benchmarks. | 🛠 Code, Tools & Libraries | 💡 Along similar lines, Nearform has just released v5 of React Live, a live editing experience for React components but better suited for use in docs, blog posts, etc. | | pdfcn: Copy-Paste Components for Making PDFs — Takes the shadcn approach to PDF generation, with components for tables, headers, lists, and larger blocks for things like invoices and reports. Rendering is done with Takumi or Forme, both WASM-based engines that don't need a headless browser. Aniket Pawar | |