The irony of a company using Nextjs for a chat app and React for a terminal UI talking about reducing attack surface.

React is actually pretty good for any kind of reactive interface, and it's small. Something under 3k lines of code, and it's well battle tested at this point.

You might have a dislike of react and that's fine, but it's not adding any significant attack surface to a project.

Nextjs on the other hand...

	▲	Maken 31 minutes ago \| parent \| next [-]
		You should add the entire JS runtime you have to ship along React to that attack surface.
	▲	shakna an hour ago \| parent \| prev \| next [-]
		We're only 10 months out from React2Shell. That is not nearly enough time to say "battle-tested".
	▲	brazukadev an hour ago \| parent \| prev [-]
		Just the ReactFiberWorkLoop.js has 5k+ lines of code. React is one or two orders of magnitude bigger than you are thinking. And that's not counting Nextjs.