Vite is not a completely opinionated tool. You can still customise its behaviour and use plugins, so both installations would have very similar vulnerabilities

Vite is not a completely opinionated tool. You can still customise its behaviour and use plugins, so both installations would have very similar vulnerabilities at the end. For SSR, you need a self-written server entry point. Webpack 5 has introduced asset modules, so now you can safely ditch raw-loader, url-loader and file-loader. [1] You might have NextJS or CRA in mind. [1] https://webpack.js.org/guides/asset-modules/ https://webpack.js.org/guides/asset-modules/