framework
Full-stack React framework included in the comparison; reported alongside React Router as faster on client-side navigation than document navigation.
No evidence-backed relationships are recorded.
TanStack's postmortem says 84 malicious versions went out across 42 packages on 2026-05-11 with no npm token stolen, because a release job restored a cache that an untrusted pull_request_target build had written.
Reality
A week building an image SaaS on Cloudflare Workers produced nine failures. In the five shown in code, two come from the TanStack Start plugin's build behaviour and three from React timing and captcha logic that follow the code anywhere.
Reality
Nuxt Endpoints builds on the validated-routing design under discussion in H3 RFC #1437, keeping files, URLs and methods while the declared schema constrains both the handler and the caller. The upstream design is still being debated.
Reality
The MCP server is generated from the app you already shipped, so the tools inherit whatever roles and plans your backend already enforces, and on Free and Pro the app has to be public before any of it works.
Reality
A Cloudflare Workers build log argues that surviving retries, duplicate callbacks and half-failed batches is database work, not model work. The SQL WHERE clause is the safety feature.
Reality
A six-route commerce app rebuilt in Kudzu, Astro, React Router, TanStack Start and Next.js argues hydration cost is the number to defend. The harness is open source, so the claim is attackable.
Reality