Files
agentic-dev/docs/library-decisions/2026-05-14-react-dom.md
Danijel Martinek 98d96d2e19 docs(tooling): add sub-processor discriminated union to ADR-022 and traces
Amends ADR-022 §9 with the `is-sub-processor` / `processes-pii` discriminated
union spec, including the five conditional fields required when a library is a
true GDPR sub-processor. Updates the evaluate-library skill to prompt for these
fields during every trace authoring pass and adds the updated frontmatter
template. Backfills all nine existing library-decision traces with the new
fields; payload gets `processes-pii: true` (self-hosted CMS that stores user
data); all pure in-process libraries get `false / false`.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-18 18:44:09 +00:00

2.5 KiB

package, version, tier, decision, date, deciders, adr, lastRevalidated, is-sub-processor, processes-pii, filter-results, verification-commands, accepted-cves
package version tier decision date deciders adr lastRevalidated is-sub-processor processes-pii filter-results verification-commands accepted-cves
react-dom ^19.0.0 core approved 2026-05-14
Danijel Martinek
null null false false
license types maintenance boundary-fit shadow-check eu-residency cve-scan named-consumer
MIT native active pass pass n/a clean pass
npm view react-dom license
npm view react-dom version
pnpm audit --audit-level=moderate

Filter: license

npm view react-dom license returns MIT. MIT is on the allowlist.

Filter: types

react-dom ships its own TypeScript declaration files in React 19. No separate @types/react-dom package is required at runtime.

Filter: maintenance

Actively maintained by Meta alongside react. Versioned and released together with the React core package.

Filter: boundary-fit

react-dom is a dependency of @repo/core-testing to enable DOM-based React component rendering via @testing-library/react. No boundary rule restricts react-dom usage in the testing tier.

Filter: shadow-check

react-dom is the sole React DOM renderer in the workspace. No competing renderer (react-native, react-three-fiber, etc.) targets the same DOM environment.

Filter: eu-residency

react-dom is a pure runtime library for DOM rendering with no network communication. EU residency does not apply.

Filter: cve-scan

pnpm audit --audit-level=moderate reports no advisories against react-dom at the time of this trace.

Filter: named-consumer

@repo/core-testing uses react-dom as a peer dependency for @testing-library/react DOM rendering. Named, non-hypothetical consumer exists today.

Prompt: replaces

react-dom is the mandatory companion to react for web rendering; no alternative was evaluated separately.

Prompt: migration-cost-out

Impossible. react-dom is the DOM rendering layer for all React components in the workspace. Replacing it would require migrating to a different renderer or framework simultaneously with React.

Prompt: alternatives-considered

  1. react-dom/server only — Insufficient: the testing layer requires the full DOM renderer for @testing-library/react.
  2. No alternatives applicablereact-dom is the only DOM renderer for React; the choice is inherent to the React framework selection.