Are Web Components better for Cybersecurity?
Are Web Components better for Cybersecurity?
Not to poke at React or any of the other popular frameworks, I'm sure they're suitable for Cybersecurity projects. They surely go through things like reviews and audits.
I'm asking from the perspective that web components are native to the browser and thus reducing what I think is called supply chain attacks (like if "npm install" introduces something it shouldn't).
Maybe the frameworks don't matter and depends on the browser/os/device it's run on?
Context: I have a p2p messaging app created with ReactJS and a separate project for a UI framework based on Lit. Both these projects can be a whole separate discussion. I was wondering if there could be any advantages to refactoring (or starting from scratch) the messaging-app to be based on the webcomponent ui framework.
Same question on Reddit with comments here. I have an answer there, but posting here in-case anything is being overlooked.