Manage js dependencies
As we were not using the package manager for js dependencies but the es6 import on cdn, we don't have an overview of:
- which libraries are used
- which version
- which should be updated for security issues...
- what happens if a cdn is down
here is the list of the differents external libraries I found in the code of sib-core:
import JSONLDContextParser from 'https://dev.jspm.io/jsonld-context-parser';
import Calendar from 'https://dev.jspm.io/tui-calendar';
import Leaflet from 'https://dev.jspm.io/leaflet';
import SlimSelect from 'https://dev.jspm.io/slim-select@1.23';
- iter-tool Async:
import asyncSome from 'https://dev.jspm.io/iter-tools/es2018/async-some';
import asyncEvery from 'https://dev.jspm.io/iter-tools/es2018/async-every';
import asyncToArray from 'https://dev.jspm.io/iter-tools/es2018/async-to-array';
import asyncChain from 'https://dev.jspm.io/iter-tools/es2018/async-chain';
import asyncFilter from 'https://dev.jspm.io/iter-tools/es2018/async-filter';
import asyncReduce from 'https://dev.jspm.io/iter-tools/es2018/async-reduce';
import asyncSlice from 'https://dev.jspm.io/iter-tools/es2018/async-slice';
import asyncMap from 'https://dev.jspm.io/iter-tools/es2018/async-map';
and soon fuse.js
, portal.js
, rxjs
and/or others
Question:
- is es6 import the best way to manage dependencies ?
- should we use package manager? (npm?)