How does one build large front end apps without using a framework like React?

Re:How does one build large front end apps without using a f... by Octoth0rpe on Friday October 17, 2025 @07:37AM (#45615518)

These are good points, but many of them aren't specific to React, and in fact likely apply if you're rolling most of your own code. For example, the app that OP used to start the conversation uses webpack (https://help.obsidian.md/credits#Third+party+acknowledgement...).

> running npm install would not give you a dozen high vulnerability package

Yes, this is a serious problem, but mostly an npm messaging problem: https://overreacted.io/npm-audit-broken-by-design/

[ Parent | on HN ]

Re:How does one build large front end apps without using a f... by csande17 on Friday October 17, 2025 @08:26AM (#45615961)

Dubious "regular expression denial of service" vulnerabilities seem like a general issue with the CVE bureaucracy lately. Like, maybe CVE-2020-10735 had a point that Python's default "int" type having unbounded size and a quadratic-time "str()" was a bit of a footgun, but now it's getting to a point where any use of backtracking in any context is just asking for a "high severity" ticket from the regex police.

[ Parent | on HN ]