[hollowturtle]

Wouldn't make more sense keeping React smaller and left those features to frameworks? I liked it more when it was marketed as the View in MVC. Surely can still be used like that today but it still feels bloated

[TZubiri]

But the react-components are a separate library, they are not installed by default

[hollowturtle]

? afaik react server components made it to core

[silverwind]

They shouldn't be loaded in a React SPA at least, e.g. `react-dom` and `react` packages should be unaffected.

[TZubiri]

So they are part of the standard distribution (like through npm install react), but are unused by default? Something like that?

[danabramov]

This code doesn’t exist in `react` or `react-dom`, no. Packages are released in lockstep to avoid confusion which is why everything got a version bump.

The vulnerable packages are the ones starting with `react-server-` (like `react-server-dom-webpack') or anything that vendors their code (like `next` does).

[ivanjermakov]

git checkout v15.0.0

There we go.

[hollowturtle]

Can I have v15 with the rendering optimizations of further versions?