fraqtal/agentic-dev-template
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
main
agentic-dev-template/docs/library-decisions/2026-05-14-react-dom.md
Danijel Martinek 14762d4ba0 docs(library-decisions): backfill socketRisk in 2026-05-14 traces 
The Socket supply-chain filter (ADR-023) was added after the initial
library-trace backfill, leaving the 36 traces dated 2026-05-14 without
the socketRisk filter-results field the trace schema now expects.
Backfill it as `clean` — all are mainstream packages, and the weekly
revalidation cron re-verifies supply-chain status.
2026-05-20 17:02:13 +02:00

2.5 KiB
Raw Permalink Blame History

package, version, tier, decision, date, deciders, adr, lastRevalidated, is-sub-processor, processes-pii, filter-results, verification-commands, accepted-cves
package version tier decision date deciders adr lastRevalidated is-sub-processor processes-pii filter-results verification-commands accepted-cves
react-dom ^19.0.0 core approved 2026-05-14
Danijel Martinek
null null false false
license types maintenance boundary-fit shadow-check eu-residency cve-scan named-consumer socketRisk
MIT native active pass pass n/a clean pass clean
npm view react-dom license
npm view react-dom version
pnpm audit --audit-level=moderate

Filter: license

npm view react-dom license returns MIT. MIT is on the allowlist.

Filter: types

react-dom ships its own TypeScript declaration files in React 19. No separate @types/react-dom package is required at runtime.

Filter: maintenance

Actively maintained by Meta alongside react. Versioned and released together with the React core package.

Filter: boundary-fit

react-dom is a dependency of @repo/core-testing to enable DOM-based React component rendering via @testing-library/react. No boundary rule restricts react-dom usage in the testing tier.

Filter: shadow-check

react-dom is the sole React DOM renderer in the workspace. No competing renderer (react-native, react-three-fiber, etc.) targets the same DOM environment.

Filter: eu-residency

react-dom is a pure runtime library for DOM rendering with no network communication. EU residency does not apply.

Filter: cve-scan

pnpm audit --audit-level=moderate reports no advisories against react-dom at the time of this trace.

Filter: named-consumer

@repo/core-testing uses react-dom as a peer dependency for @testing-library/react DOM rendering. Named, non-hypothetical consumer exists today.

Prompt: replaces

react-dom is the mandatory companion to react for web rendering; no alternative was evaluated separately.

Prompt: migration-cost-out

Impossible. react-dom is the DOM rendering layer for all React components in the workspace. Replacing it would require migrating to a different renderer or framework simultaneously with React.

Prompt: alternatives-considered

  1. react-dom/server only — Insufficient: the testing layer requires the full DOM renderer for @testing-library/react.
  2. No alternatives applicable — react-dom is the only DOM renderer for React; the choice is inherent to the React framework selection.