Tag
dependency-vetting
Safeguard articles tagged "dependency-vetting" — guides, analysis, and best practices for software supply chain and application security.
3 articles
Open Source
React Native Image Libraries: fast-image, slider-box, crop-picker Reviewed
react-native-image-slider-box, fast-image, and image-crop-picker solve real UI problems, but their maintenance status and native code deserve a hard look before you ship them.
May 9, 20256 min read
Open Source
React Form Input Packages: react-hook-form, react-phone-input-2, country-state-city
The react-phone-input-2 npm package has half a million weekly downloads and no releases since 2021. A practical review of three form-layer dependencies and what each one really costs.
Apr 17, 20256 min read
Open Source
Vetting React Native npm Packages: pager-view, paper, video, config
Before you add react-native-pager-view npm installs to a mobile app, run the same vetting you would for backend code. Here is a practical checklist using four popular packages as case studies.
Mar 21, 20256 min read