Our dependency graph is crazy. In order to reduce our dependencies to make security reviews easier, we should use Vite and Rollup instead.
- Mentioned In
- T288551: Investigate replacing vue-cli with vite and webpack with rollup for Toolhub
T273020: Security Readiness Review For Toolhub
T288466: [QS-GUI] Port Wikidata Query UI to a modern build system
T235498: Share Storybook Config
T264822: (MS 7) Security Readiness Review For Wikidata Query Builder
T279108: Introduce a Front-end Build Step for MediaWiki Skins and Extensions
- Mentioned Here
- T272879: Migrate WVUI library to Rollup or Vite
Setting to medium for now. While it certainly would be nice to have, it won't change much for the current hike anymore. However, the learning from seeing if it can be made to work with vue2 could be useful for future projects.
The priority would be raised if the sec-team has a problem with the large amount of dependencies that comes with vue-cli (+webpack).