New Library Request: dnd-kit

[dangrous]

In order to properly evaluate if a new library can be added to package.json, please fill out this request form. It will be automatically assigned someone from our review team that will go through and vet the library.

In order to add any new production dependency, it must be approved by the App Deployer team. They will evaluate the library and decide if it's something we want to move forward with or if other alternatives should be explored.

Note: This is only for production dependencies. While we don't want people to add packages to dev-dependencies willy-nilly, we recognize that there isn't as great of a need there to secure them.

Name of library: dnd-kit

Details

• Link to package: https://dndkit.com/
• Problem solved by using this package: detailed here: [Due for payment 2025-05-28] [$250] Distance - User able to drag start and Stop way points across the page #57312 (comment) - namely, fixes a dragging bug AND the current package is being deprecated.
• Number of stars in GH: 14.2k
• Number of monthly downloads: ~10MM
• Number of releases in the last year: 3 (6.2, 6.3, 6.3.1)
• Level of activity in the repo: Last activity three months ago
• Alternatives: existing, deprecated package.
• Are security concerns brought up and addressed in the library's repo? no
• How many dependencies does this lib use that will be brought into our code? None
• What will the effect be on the bundle size of our code? low - 10kb minified

[melvin-bot]

Triggered auto assignment to @cristipaval (AutoAssignerAppLibraryReview), see https://stackoverflowteams.com/c/expensify/questions/17737 for more details.

[melvin-bot]

New Library Review

• Are all the answers in the main description filled out properly and make sense?
• Who maintains the library and how well is it maintained?
• How viable are the alternatives?
• Should we build it ourselves instead?

Once these questions are answered, start a thread in #engineering-chat, ping the @app_deployers group, and call for a vote to accept the new library. Once the vote is complete, update this issue with the outcome and procede accordingly. Here is a sample post:

Hey @app_deployers,

There is a request to add a new library to App that we need to consider. Please look at this GH and then vote :+1: or :-1: on accepting this new library or not.

GH_LINK

[dangrous]

hey @cristipaval! Let me know if you have any questions about this one

[cristipaval]

Hey, I'll take care of this today!

[cristipaval]

@dangrous, how did you check that the library size is 10 kB? I see here it is 14 kb. Same question about the monthly downloads, I see here that the number is 2.8MM

[cristipaval]

Sorry, I think I misinterpreted the chart with the downloads. The chart shows the daily downloads over the last months.

[cristipaval]

Posted the request here

[dangrous]

I got the size from their GitHub but I guess they were rounding:

14kb seems right.

As for downloads, I pulled the weekly number from https://www.npmjs.com/package/@dnd-kit/core and just multiplied it by 4 to get the month

[cristipaval]

I pinged the App Deployers group again to ask them to vote.

[cristipaval]

There's no opposition to this. I think we can go ahead and add it.

[dangrous]

Awesome, thanks @cristipaval !