The Foundation will be adopting Vue 3 (see T251974). The [[ https://github.com/vuejs/rfcs/issues/183 | expected v3 release date is early August ]]. It would be ideal if a security review of the library could be completed shortly after to enable early adoption before many components have been written.
**Project Information **
* Name of tool/project: Vue.js
* Project home page: https://vuejs.org/
* Name of team requesting review: Web
* Primary contact:
* Target date for deployment:
* Link to code repository / patchset:Stephen Niedzielski (@niedzielski)
* Target date for deployment: August 30th, 2020
* Link to code repository / patchset: https://github.com/vuejs/vue-next/releases (expected to be https://github.com/vuejs/vue/releases once released)
**Description of the tool/project: **
JavaScript framework.
**Description of how the tool will be used at WMF:**
This framework will be used by all frontend UI code. It's possible that backend usage may occur in the future. The initial usage will be Vue.js search (T244392).
**Dependencies**
>List dependencies, or upstream projects that this project relies on.No additional runtime dependencies but numerous compile-time dependencies including:
- [[ https://github.com/vuejs/vue-next/blob/master/package.json | Vue.js 3 ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/reactivity/package.json | @vue/reactivity ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/shared/package.json | @vue/shared ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/runtime-dom/package.json | @vue/runtime-dom ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/runtime-core/package.json | @vue/runtime-core ]]
**Has this project been reviewed before?**
> Please link to tasks or wiki pages of previous reviews[[ https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/eedfbbd/resources/Resources.php#542 | Vue 2 is in Core ]] but not Vue 3.
**Working test environment**
>Please link or describe setup process for setting up a test environment.https://github.com/vuejs/vue-next-webpack-preview
**Post-deployment**
> Name of team responsible for tool/project after deployment and primary contact.Web