Hacker News Reader

Just the ReactFiberWorkLoop.js has 5k+ lines of code. React is one or two orders of magnitude bigger than you are thinking. And that's not counting Nextjs.

View on HN

No that's including all the comments, types, dev only checks etc. I'm talking about what you get when using the production build.

I had a quick look around and it's actually ~1000 lines apparently, in React 19.

Actually why stop at that. The minified build apparently has just one line!

I don't feel like that's a good faith reply. I'm making the claim that react's production build core is surprisingly small and shouldn't be considered a security risk (or attack surface as someone above phrased it).

Do you dispute that? If so, why?

Your claim that the "react core" is small isn't correct. React+ReactDOM is >130kb, the minimum needed to run a react component. To create TUIs, Ink ships even more.

Reply on news.ycombinator.com