New uses of moment should not be introduced. Moment is no longer maintained, and if more security vulnerabilities are discovered, it is likely they will never be patched. One should be mindful to try to net reduce moment usage, rather than net increase. day.js can be a great replacement. luxon is also an alternative that provides a migration guide for moment users (https://moment.github.io/luxon/#/moment). day.js is my go-to these days due to the fact that is is very small, which is great for both performance and from a security perspective - lines of code correlates with number of security issues pretty well. day.js has never had any known security issues, where as luxon has had an issue fixed earlier this year.
as stated by Graham C in https://github.com/aqualinkorg/aqualink-app/pull/899
New uses of moment should not be introduced. Moment is no longer maintained, and if more security vulnerabilities are discovered, it is likely they will never be patched. One should be mindful to try to net reduce moment usage, rather than net increase. day.js can be a great replacement. luxon is also an alternative that provides a migration guide for moment users (https://moment.github.io/luxon/#/moment). day.js is my go-to these days due to the fact that is is very small, which is great for both performance and from a security perspective - lines of code correlates with number of security issues pretty well. day.js has never had any known security issues, where as luxon has had an issue fixed earlier this year.