3 ms·

People say that but jQuery is 10x the size of React in absolute usage. By that criteria, you would go with jQuery. Do let us know your criteria and we can sugg

• sbarre 3y ago
  I think you misunderstood the criteria. JQuery and React are not really apples to apples. If we're talking about a front-end framework for building modern applications, then we're looking at React, Angular, Vue, Svelte, etc.. JQuery is not even in that conversation, so it doesn't matter how much adoption it has.
  • nnurmanov 3y ago
    React has indeed large and thriving community. But personally, I don't understand their roadmap. It was smart decision to open the framework in the early days, but for enterprise we need more control with what's installed. E.g. with vanilla NextJS install I counted over 200 node packages, who have checked if those packages do not have security issues? We have a shortlist, we are looking at React (with tight control what is installed as additional packages), Angular (we don't have much experience with this framework in house), Oracle JET (JQuery + knockout.js), SAPUI (also JQuery), but the last two frameworks do not have large community, which could possibly mean that in case of issues we are all by ourselves.
    • sbarre 3y ago
      > who have checked if those packages do not have security issues? There are several companies that provide this service. Socket.dev being the one that we use in the company where I work. We also make use of GitHub Advanced Security and Dependency Bot. Supply chain security is a problem for any language where your developers rely on third party packages, but agreed that it's particularly challenging with the JS ecosystem.