Current JavaScript dependencies

Last updated on
6 May 2025

Keep this page updated for dependencies that have a significant security or API surface, or Drupal is very dependent on their release cycles. This includes CKEditor, JQuery and JQuery UI.

To find other dependencies see issues tagged "approved dependency evaluation".

Current JavaScript dependencies

Backbone

Repository
Release cycle
Security policies
Security issue reporting
Contact(s)

CKEditor

Repository
Release cycle

CKEditor 4

There is a single development branch; old minor releases are EOL when new minors are released.
From CKEditor Support Center: How long will CKEditor 4 be supported?

The CKEditor 4.x line is under a "Long Term Support" (LTS) programme which means that its development and support is guaranteed until 2023.

We discussed this with the CKEditor maintainers and they confirmed they are comfortable backporting security fixes only to CKEditor 4 with coordinated disclosure through the end of 2023. They would also consider backporting a fix for a browser compatibility if the editor was completely broken in a given browser.

CKEditor 5

CKEditor 5 is actually a branding label, not the major version. Major releases with BC breaks are currently occurring every 6 months or so (CKEditor 5 releases). The CKEditor maintainers expect this to slow down as the product matures, and are looking into ways to refine their BC policy to reduce breaking changes in public APIs.
According to the CKEditor 5 documentation, CKEditor 5 will be supported until at least 2026.

Security policies
Security issue reporting
Contact(s) kkrzton, wwalc

Classlist

Repository
Release cycle
Security policies
Security issue reporting
Contact(s)

Domready

Repository
Release cycle
Security policies
Security issue reporting
Contact(s)

jQuery

Repository https://github.com/jquery/jquery
Release cycle
Security policies
Security issue reporting
Contact(s) Michał Gołębiowski-Owczarek (can DM in Drupal Slack)

jQuery UI

Repository
Release cycle
Security policies
Security issue reporting
Contact(s)

HTMX

Repository https://github.com/bigskysoftware/htmx
Release cycle Expected quarterly. https://htmx.org/essays/future/
Security policies https://github.com/bigskysoftware/htmx/security
Security issue reporting https://docs.github.com/en/code-security/security-advisories/guidance-on...
Contact(s)

1cg, fathershawn

Help improve this page

Page status: No known problems

You can: