The Foundation will be adopting Vue 3 (see T251974). The [[ https://github.com/vuejs/rfcs/issues/183 | expected v3 release date is early August ]]. It would be ideal if a security review of the library could be completed shortly after to enable early adoption before many components have been written.
**Project Information **
* Name of tool/project: Vue.js
* Project home page: https://vuejs.org/
* Name of team requesting review: Web
* Primary contact: Stephen Niedzielski (@niedzielski)
* Target date for deployment: As soon as available
* Link to code repository / patchset:
* https://github.com/vuejs/vue-next/releases/tag/v3.0.0 (expected to be https://github.com/vuejs/vue/releases once released)
**Description of the tool/project: **
JavaScript framework.
**Description of how the tool will be used at WMF:**
This framework will be used by all frontend UI code. It's possible that backend usage may occur in the future. The initial usage will be Vue.js search (T244392).
**Dependencies**
No additional runtime dependencies but numerous compile-time dependencies including:
- [[ https://github.com/vuejs/vue-next/blob/master/package.json | Vue.js 3 ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/reactivity/package.json | @vue/reactivity ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/shared/package.json | @vue/shared ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/runtime-dom/package.json | @vue/runtime-dom ]]
- [[ https://github.com/vuejs/vue-next/blob/master/packages/runtime-core/package.json | @vue/runtime-core ]]
**Has this project been reviewed before?**
[[ https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/eedfbbd/resources/Resources.php#542 | Vue 2 is in Core ]] but not Vue 3.
**Working test environment**
https://github.com/vuejs/vue-next-webpack-preview
**Post-deployment**
Web