Outdated or vulnerable libraries pose security risks and often include unnecessary bloat that degrades performance.
Quick Reference
- Regularly audit dependencies for known security vulnerabilities
- Replace heavy libraries with lightweight alternatives (e.g., date-fns vs moment)
- Ensure libraries are properly versioned and served via reliable CDNs or self-hosted
Check
Check the project's JavaScript dependencies for known vulnerabilities and outdated versions.
Fix
Update vulnerable libraries to secure versions and replace bloated dependencies with modern, lightweight alternatives.
Explain
Explain the risks of using outdated JavaScript libraries and the benefits of using lightweight alternatives.
Code Review
Review the routes, assets, and loading behavior that affect Use secure and up-to-date JS libraries. Flag exact files, requests, or rendering steps that add unnecessary network, CPU, or layout cost, and describe the measurement method used to confirm the issue.
For full implementation details, code examples, and framework-specific guidance,
see references/rule.md.
Rule page: https://frontendchecklist.io/en/rules/performance/js-libraries