Why does MeteorJS still have such an old jQuery version (10 years old)?

  • Meteor’s jquery@3.0.2 (Jul 2016)
  • npm jquery@3.7.1 (Aug 2023)

Meteor’s is missing 7 years of security fixes (notably the 3.5 $.parseHTML XSS hardening), bug fixes, and selector improvements (:has(), etc.).