shouldiuse.io

Categories

VERDICT

Should I use Redux-toolkit?

Skip to main content - redux-toolkit.js.org

Depends. Worth adopting if you run a large React codebase with complex shared client state or you're already on Redux and modernizing. Skip it for small apps, prototypes, or server-state-only needs — lighter tools fit better.

Confidence

Medium. Based on ~30 public sources: official docs, GitHub, Reddit, dev.to, Hacker News, and engineering case studies.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Open source

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Large React apps with complex shared state
  • Existing Redux codebases modernizing
  • Server-state caching via RTK Query
  • TypeScript-heavy teams

Not for

  • Small apps — Context or Zustand is lighter
  • Beginners still learning React basics
  • Server-state-only apps — use TanStack Query
  • Teams wanting zero boilerplate or store ceremony

Gotchas - check before you buy

high

Bare 'redux-toolkit' npm package name was held by a third party — supply-chain confusion risk

medium

Immer dependency had CVE-2020-28477 (prototype pollution); keep dependencies updated

medium

Guess: Redux-shaped code is costly to migrate away from later

low

npm audit warnings frequently alarm beginners; verify whether they affect RTK itself

Pros and cons

Pros

  • Official, batteries-included way to write Redux
  • Free and open source under MIT
  • Cuts classic Redux boilerplate with autogenerated slices and actions
  • Includes RTK Query for data fetching and caching
  • Used in production at large companies

Cons

  • Heavier setup than Zustand or Jotai for simple apps
  • Community divided on whether Redux is still worth learning
  • Some developers find it verbose and ugly
  • Hacker News debate: 'Nobody is using Redux any more'

Sources & method

Analyzed 10/03/2026 - 10 sources - No Redux Toolkit CVEs found; one 2021 immer-dependency CVE and an npm namespace-squatting concern are documented on GitHub.

official x2review x4security x2news x2
  • CVE-2020-28477 in immer dependency, Immer prototype-pollution CVE was tracked against the redux-toolkit repo in 2021.
  • npm namespace 'redux-toolkit' held by third party, Bare package name squatting created supply-chain confusion risk; flagged April 2026.

Key stats

  • Value for money: 5/5

    Rating

  • $0

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 5/5. Free; no licensing or usage costs
  • Ease of use: 3/5. Easier than classic Redux, still complex
  • Feature depth: 5/5. Batteries included: RTK Query, Immer, Reselect
  • Support quality: 3/5. Community-driven; no paid support or SLAs
  • Security posture: 3/5. No RTK CVEs; dependency risks flagged
  • Free Price Open source, MIT license
  • Yes Free tier No paid plans exist
  • v2.0 Latest major release Bundles Redux core, Reselect, RTK Query
  • Linux Foundation Governance Development tracked via LFX Insights

Pricing

Open source

$0

  • RTK core, RTK Query, Immer, Reselect included
  • MIT licensed, no usage limits

Security

No Redux Toolkit CVEs found; one 2021 immer-dependency CVE and an npm namespace-squatting concern are documented on GitHub.

  • CVE-2020-28477 in immer dependencyImmer prototype-pollution CVE was tracked against the redux-toolkit repo in 2021.⁷
  • npm namespace 'redux-toolkit' held by third partyBare package name squatting created supply-chain confusion risk; flagged April 2026.⁸

What users say

Developers credit RTK with killing classic Redux boilerplate, but many still debate Redux's place versus Zustand and Jotai.

“I think redux-toolkit is just plain ugly.”
dev.to comment
“I don't understand all the Redux hate...”
Reddit, r/reactjs

Alternatives

Compare Redux-toolkit with each alternative.

  • Zustand

    Tiny API, minimal boilerplate for most React apps

  • Jotai

    Atom-based state, great for fine-grained updates

    Redux-toolkit vs Jotai
  • TanStack Query (React Query)

    Server-state caching without a global store

  • React Context + useState

    Built-in; enough for small apps and prototypes

Companies that use it

Full analysis

Based on ~30 public sources: official docs, GitHub, Reddit, dev.to, Hacker News, and engineering case studies.

Free official Redux toolkit: great for big React apps' complex state; overkill for small apps — use Zustand or Context.

Methodology

Based on ~30 public sources: official docs, GitHub, Reddit, dev.to, Hacker News, and engineering case studies.

Sources

  1. official
  2. official
  3. review
  4. review
  5. review
  6. review
  7. security
  8. security
  9. news
  10. news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.