Add focus-trap-react library

[jnowakow]

Name of library: focus-trap-react

Details

• Link to package: https://github.com/focus-trap/focus-trap-react
• Problem solved by using this package: It helps correctly handle focus & tab navigation in modals, RHP and LHP.
• Number of stars in GH: 697
• Number of monthly downloads: about 2 milion
• Number of releases in the last year: 7
• Level of activity in the repo: low, library is simple and only maintain
• Alternatives: none
• Are security concerns brought up and addressed in the library's repo?
  No security concerns
• How many dependencies does this lib use that will be brought into our code?
  2
• What will the effect be on the bundle size of our code?
  91.8kb

Link to PR adding the library

[melvin-bot]

Triggered auto assignment to @mountiny (AutoAssignerAppLibraryReview), see https://stackoverflowteams.com/c/expensify/questions/17737 for more details.

[melvin-bot]

New Library Review

• Are all the answers in the main description filled out properly and make sense?
• Who maintains the library and how well is it maintained?
• How viable are the alternatives?
• Should we build it ourselves instead?

Once these questions are answered, start a thread in #engineering-chat, ping the @app_deployers group, and call for a vote to accept the new library. Once the vote is complete, update this issue with the outcome and procede accordingly. Here is a sample post:

Hey @app_deployers,

There is a request to add a new library to App that we need to consider. Please look at this GH and then vote :+1: or :-1: on accepting this new library or not.

GH_LINK

[mountiny]

@jnowakow There seems to be only one person maintaining this and the library seems to be one file. Is there a specific reason to use this library instead of just creating our own lib function that could do the same given its not that complex code?

[jnowakow]

For me the reason is that it's ready to use and doesn't introduce any security concerns. It's also tested as it's quite popular. So, I don't see a point in rewriting it as it would require us to spend time on the rewrite. We can make a mistake when rewriting. And then we need to maintain the lib. In summary I don't see reason why we would need to copy it instead of using ready package

[mountiny]

Shared here

[mountiny]

@jnowakow I believe we are good to go here with the PR, we got couple 👍 and no 👎 from deployers

[mountiny]

@jnowakow this is ready to move ahead