Overview
React is a library for building UIs from components. On its own it renders in the browser; features such as server rendering, React Server Components and Server Functions are defined by React but delivered through frameworks and bundlers. That is why react.dev's own advice is to start new apps with a framework: it lists Next.js (App Router), maintained by Vercel, and React Router v7, maintained by Shopify, and notes that these frameworks also support client-only SPAs and static sites.
If a framework does not fit, the docs explain how to build a React app from scratch with a build tool such as Vite, Parcel or Rsbuild. Create React App was deprecated for new apps on 14 February 2025.
Governance changed in 2026. Announced in October 2025, the React Foundation launched on 24 February 2026 under the Linux Foundation; React, React Native and JSX are no longer owned by Meta. Founding platinum members include Amazon, Callstack, Expo, Huawei, Meta, Microsoft, Software Mansion and Vercel. Security is worth watching when you use server features: in December 2025 React disclosed a CVSS 10.0 remote code execution flaw in React Server Components (CVE-2025-55182), patched in 19.0.1, 19.1.2 and 19.2.1.
Pricing and plans
What it does
- Components and hooks
- UI built from function components with state and effects via hooks.
- Server Components
- Components that render only on the server, available through supporting frameworks.
- Server Functions
- Functions called from the client and run on the server, wired up by the framework.
- React Compiler
- Automatic memoisation, integrated in frameworks such as Next.js 16.
Strengths and limitations
Strengths
- Largest ecosystem of libraries, component kits and developers.
- Neutral foundation governance since February 2026 with many corporate members.
- Choice of frameworks (Next.js, React Router, TanStack Start, Waku) and plain SPAs.
Limitations
- Not a full framework: routing, data loading and server rendering come from a framework you pick.
- Create React App is deprecated; new projects need a framework or a build tool such as Vite.
- Server Components widen the server attack surface; the December 2025 RSC flaw was rated CVSS 10.0.
Who it suits
Good for
- Any team that wants the largest UI ecosystem
- SPAs built with Vite
- Apps that will adopt a React framework
Look elsewhere if
- Content sites that should ship almost no JavaScript without a framework like Astro
- Teams wanting one opinionated, all-in-one framework
Pricing history
-
React moves to the React Foundation
Launched 24 February 2026 (announced October 2025): React, React Native and JSX are now owned by the React Foundation under the Linux Foundation instead of Meta. Source ↗
-
Critical React Server Components vulnerability
Disclosed 3 December 2025: CVE-2025-55182 (CVSS 10.0) allowed unauthenticated remote code execution through React Server Function endpoints. Fixed in React 19.0.1, 19.1.2 and 19.2.1; next, react-router, waku and rwsdk were listed as affected. Source ↗
-
Create React App deprecated
Announced 14 February 2025: the React team deprecated Create React App for new apps and now recommends starting with a framework (Next.js, React Router) or a build tool such as Vite, Parcel or Rsbuild. Source ↗
Alternatives to React
Questions
Who owns React now?
The React Foundation, hosted by the Linux Foundation, since 24 February 2026; Meta contributed the project and remains a member.
Is Create React App deprecated?
Yes. The React team deprecated it for new apps on 14 February 2025 and recommends a framework or a build tool like Vite, Parcel or Rsbuild.
Which React framework does react.dev recommend?
It lists Next.js (App Router) and React Router v7 as full-stack frameworks, plus Expo for native apps.
Sources read for this page