What is nulldeps JS framework?

nulldeps is a zero-dependency micro-framework for web apps using Web Components, router, store, EventBus, and HTTP client — all no-npm vanilla JS.

Is nulldeps ready for production apps?

Viable for small, high-security apps like internal tools or kiosks. Struggles at scale without ecosystem tools; test rigorously for your needs.

nulldeps wins on dep surface (zero risk). React use npm but with mitigations. Choose nulldeps for paranoia; React for speed.

🌐 Frontend & Web

One dev's radical fix for npm's supply chain risks: a JS framework with zero dependencies. Control your stack — or miss out on everything else?

theAIcatchup Apr 09, 2026 3 min read

nulldeps eliminates npm risks entirely but sacrifices ecosystem velocity. 𝕏
Ideal for high-security niches; breaks down on large teams and complex apps. 𝕏
Post-axios hack, it spotlights JS supply chain woes — but won't dethrone React. 𝕏

Published by

Ship faster. Build smarter.

#npm security #nulldeps #supply chain attacks #vanilla JS framework #vanilla js #zero dependencies

Get the best Developer Tools stories of the week in your inbox — no noise, no spam.

Originally reported by dev.to