Benchmarks
How Attaform holds up across the Vue form-library field on the same demanding forms, measured in a real browser. Bundle size, supply-chain health, and per-scenario runtime, with every number traced to the run that produced it.
This page is an honest scoreboard. The numbers come from apps/bench-arena, a self-contained harness that drives every library through identical scenarios in real Chromium via Playwright, then writes one provenance-stamped results.json that this page renders directly. Nothing is hand-entered. Where Attaform leads, the run says so; where it pays a cost, the run says that too. Both ship from the same green run.
How to read this
A fair cross-library comparison has to account for the fact that these libraries do different amounts of work. The harness handles that with a few rules:
- Layers are the fairness axis. Form-state libraries (Attaform among them) own reactive values, validation, and input binding. Validation-only libraries own validation against state you wire yourself. A batteries-included library renders its own inputs. Each row is labeled with its layer, so a validation-only engine mounting faster than a full form-state library is read as owning less, not as winning.
- The DOM is held constant. Every headless library drives the same bare
<input>markup over the same field count and the same schema, so a runtime number reflects the library's own machinery, not its choice of components. - Every library runs in its fastest idiomatic configuration. Debounces are neutralized, validation triggers are normalized, and array and union primitives use each library's native fast path. Attaform is measured on its shipping default, strict mode, never a relaxed setting.
- Real builds, pinned validators. Attaform is consumed as its published
dist, the same artifact an installer gets, minified in the same build as every other library. Zod v3 is pinned across the Zod-capable cohort. - Numbers normalize two ways. A ratio compares each library to Attaform at the same size. A slope compares a library to itself at the scenario's smallest size, so the shape of growth survives a change of machine.
The harness, every adapter, and the scenario generators live in apps/bench-arena. Found a fairer configuration for a library? The adapters are small and the README invites a pull request.
What it costs to adopt
Before any runtime number, three figures decide whether a library is worth reaching for: what it can express, what it adds to your bundle, and how its supply chain scores.
Capability coverage
What each library expresses as a first-class primitive versus composes by hand. A gap here becomes honest expressiveness data, never a rigged timing loss: a shape a library cannot express idiomatically is left out of its runtime rows rather than forced into a slow number.
| Library | Layer | Flat | Deeply nested | Dynamic arrays | Grid | Discriminated union | Massive | Wizard |
|---|---|---|---|---|---|---|---|---|
| Attaform Zod 3 | Form state | Native | Native | Native | Native | Native | Native | Native |
| vee-validate Zod 3 | Form state | Native | Native | Native | Native | Hand-rolled | Native | Hand-rolled |
| @tanstack/vue-form Zod 3 | Form state | Native | Native | Native | Native | Hand-rolled | Native | Hand-rolled |
| @formisch/vue Valibot | Form state | Native | Native | Native | Native | Hand-rolled | Native | Hand-rolled |
| Regle (schema) Zod 3 | Validation only | Native | Native | Native | Native | Native | Native | Hand-rolled |
| Regle (rules) native rules | Validation only | Native | Native | Native | Native | Hand-rolled | Native | Hand-rolled |
| FormKit Zod 3 | Batteries included | Native | Native | Native | Native | Hand-rolled | Native | Hand-rolled |
| Vuelidate native rules | Validation only | Native | Native | Hand-rolled | Hand-rolled | Hand-rolled | Native | Hand-rolled |
Native: a first-class primitive. Hand-rolled: composed from lower-level pieces. Dash: not expressed, which the runtime tables read as no number, never a slow one.
Bundle size
Attaform is the heaviest in the cohort. That is the cost of shipping reactive form state, schema validation binding, persistence, undo and redo, and a multi-step wizard in one zero-dependency package, and it is the honest price of admission. The figure is the full bundle; an app that route-splits its forms pulls less on a first paint.
| Library | Gzipped | vs Attaform | Validator |
|---|---|---|---|
| @formisch/vue | 3.6 kB | 0.05× | valibot 1.4.1 |
| Vuelidate | 5.0 kB | 0.07× | native validators |
| vee-validate | 24.6 kB | 0.36× | zod 3.25.76 |
| @tanstack/vue-form | 30.0 kB | 0.44× | zod 3.25.76 |
| Regle | 31.5 kB | 0.46× | zod 3.25.76 |
| FormKit | 43.2 kB | 0.63× | zod 3.25.76 |
| Attaform | 68.3 kB | 1× | zod 3.25.76 |
Each row is the same minimal real form (one text field, one email field, schema-validated, a submit handler) in that library's idiomatic API, with its validator weighed in. Vue is external, since every app ships it once. Attaform's figure is its full bundle; with route-level code-splitting a first paint pulls less.
Supply-chain health
The OpenSSF Scorecard rates a project's adoption of supply-chain practices: branch protection, signed releases, pinned dependencies, CI hardening, and more. For a form library headed into an audited setting, that posture is part of the cost of adoption, so the benchmark stamps each project's current score alongside the size and runtime figures.
| Library | OpenSSF Scorecard | As of | Link |
|---|---|---|---|
| Attaform | 7.9 / 10 | 2026-06-11 | Scorecard |
| vee-validate | 3.6 / 10 | 2026-06-08 | Scorecard |
| @tanstack/vue-form | Not published | — | Repository |
| @formisch/vue | Not published | — | Repository |
| Regle (schema) | Not published | — | Repository |
| Regle (rules) | Not published | — | Repository |
| FormKit | Not published | — | Repository |
| Vuelidate | 4.4 / 10 | 2026-06-08 | Scorecard |
The OpenSSF Scorecard rates a project's adoption of supply-chain practices out of 10. An absent score has two meanings, kept distinct here. Not published means the project has not opted into a Scorecard, which is a choice, not a deficiency. Unavailable means the lookup did not complete on this run, a network gap on our side and never a statement about the project. Scores are point-in-time; the linked viewer shows the live result.
Typing into a form
Keystroke latency
The headline interaction. A keystroke runs the value write, validation, and the re-render it triggers. On a flat form Attaform clears a 60 fps frame budget with room to spare.
In the leading group of form-state libraries on this run.
| Library | F10 | F50 |
|---|---|---|
| Attaform | 0.60 ms 1× | 1.10 ms 1× |
| vee-validate | 0.60 ms 1× | 0.90 ms 0.82× |
| @tanstack/vue-form | 0.70 ms 1.17× | 1.20 ms 1.09× |
| @formisch/vue | 0.60 ms 1× | 1.10 ms 1× |
| Regle (schema) | 1.00 ms 1.67× | 1.20 ms 1.09× |
| Regle (rules) | 0.60 ms 1× | 0.80 ms 0.73× |
| FormKit | 0.70 ms 1.17× | 1.10 ms 1× |
| Vuelidate | 0.50 ms 0.83× | 0.90 ms 0.82× |
At five thousand fields the picture tightens. The harness reports where Attaform lands plainly, and it is a scenario worth a future look.
Near the front of the form-state pack here.
| Library | L2000 | L5000 |
|---|---|---|
| Attaform | 14.2 ms 1× | 26.3 ms 1× |
| vee-validate | 12.4 ms 0.87× | 20.3 ms 0.77× |
| @tanstack/vue-form | 31.3 ms 2.2× | 68.5 ms 2.6× |
| @formisch/vue | 12.1 ms 0.85× | 21.2 ms 0.8× |
| Regle (schema) | 18.7 ms 1.32× | 46.0 ms 1.74× |
| Regle (rules) | 10.0 ms 0.7× | 20.1 ms 0.76× |
| FormKit | 4.95 ms 0.35× | did not finish> 5 min |
| Vuelidate | 12.5 ms 0.88× | 20.7 ms 0.79× |
Re-render scope
Editing one cell of a large grid should re-render one field, not the form. Configured optimally, the modern headless cohort all reaches that bound, and there is no lower number to beat.
One render per keystroke, whatever the form size. That is the design target, and the run holds it.
| Library | N20M8 | N100M8 |
|---|---|---|
| Attaform | 1 renders 1× | 1 renders 1× |
| vee-validate | 1 renders 1× | 1 renders 1× |
| @tanstack/vue-form | 1 renders 1× | 1 renders 1× |
| @formisch/vue | 1 renders 1× | 1 renders 1× |
| Regle (schema) | 1 renders 1× | 1 renders 1× |
| Regle (rules) | 1 renders 1× | 1 renders 1× |
| FormKit | 3 DOM mutations †3× | 3 DOM mutations †3× |
| Vuelidate | 1 renders 1× | 1 renders 1× |
† Reported as DOM mutations, a proxy for a library that owns its inputs rather than binding the shared bare field. Not directly comparable to a Vue render count.
Standing up a form
Mounting a large form
Building a two-thousand-field form from scratch is where the form-state libraries separate. Attaform mounts the whole reactive tree, validation wiring included, every value and validation path live before the first paint.
Squarely in the form-state pack, neither out front nor at the back.
| Library | L2000 |
|---|---|
| Attaform | 178 ms 1× |
| vee-validate | 890 ms 4.99× |
| @tanstack/vue-form | 7813 ms 43.81× |
| @formisch/vue | 99.3 ms 0.56× |
| Regle (schema) | 268 ms 1.5× |
| Regle (rules) | 296 ms 1.66× |
| FormKit | 12705 ms 71.23× |
| Vuelidate | 135 ms 0.75× |
Memory
Retained heap after mount, the library's reactive and validation state at scenario size. Churn is the per-cycle allocation pressure, and leak is the residual across mount and teardown cycles. The sparkline traces retained heap across the measured cycles.
Among the faster form-state libraries on this shape.
| Library | L2000 |
|---|---|
| Attaform | 11814 kB1× churn 16333 kB · leak 42 kB |
| vee-validate | 22638 kB1.92× churn 1562 kB · leak 1479 kB |
| @tanstack/vue-form | 22550 kB1.91× churn 5131 kB · leak 1650 kB |
| @formisch/vue | 11516 kB0.97× churn 1556 kB · leak 4 kB |
| Regle (schema) | 33530 kB2.84× churn 5231 kB · leak 24 kB |
| Regle (rules) | 41671 kB3.53× churn 570 kB · leak 34 kB |
| FormKit | 377189 kB31.93× churn 1036 kB · leak 27 kB |
| Vuelidate | 14820 kB1.25× churn 3511 kB · leak 8 kB |
Working the harder shapes
Validation throughput
A full-form validation pass over a massive form, the cost of a submit on the largest shape in the suite.
Near the front of the form-state pack here.
| Library | L2000 | L5000 |
|---|---|---|
| Attaform | 2.00 ms 1× | 2.90 ms 1× |
| vee-validate | 18.8 ms 9.38× | 38.4 ms 13.24× |
| @tanstack/vue-form | 938 ms 468.8× | did not finish> 5 min |
| @formisch/vue | 1.40 ms 0.7× | 2.70 ms 0.93× |
| Regle (schema) | 30.2 ms 15.1× | 88.8 ms 30.62× |
| Regle (rules) | 95.1 ms 47.55× | 238 ms 82.21× |
| FormKit | 385 ms 192.3× | did not finish> 5 min |
| Vuelidate | 0.30 ms 0.15× | 0.80 ms 0.28× |
Discriminated unions
Writing into and flipping between variants of a discriminated union. Attaform walks only the active branch, so a variant flip touches the branch in play rather than every alternative.
Near the front of the form-state pack here.
| Library | DU |
|---|---|
| Attaform | 1.00 ms 1× |
| vee-validate | 1.10 ms 1.1× |
| @tanstack/vue-form | 1.00 ms 1× |
| @formisch/vue | 0.80 ms 0.8× |
| Regle (schema) | 1.40 ms 1.4× |
| Regle (rules) | 1.70 ms 1.7× |
| FormKit | 6.90 ms 6.9× |
| Vuelidate | 0.80 ms 0.8× |
Dynamic arrays
Appending and reordering rows in a growing list. Attaform's array helpers copy the target array before mutating, which keeps reads fast and identity stable but shows up as real cost on a reorder at a hundred rows. It is an honest line on the board.
Behind the form-state pack on this shape, and the run shows it plainly.
| Library | N10 | N100 |
|---|---|---|
| Attaform | 2.60 ms 1× | 11.6 ms 1× |
| vee-validate | 2.10 ms 0.81× | 10.0 ms 0.86× |
| @tanstack/vue-form | 1.20 ms 0.46× | 3.50 ms 0.3× |
| @formisch/vue | 0.70 ms 0.27× | 1.40 ms 0.12× |
| Regle (schema) | 2.00 ms 0.77× | 11.6 ms 1× |
| Regle (rules) | 1.90 ms 0.73× | 10.0 ms 0.86× |
| FormKit | 4.60 ms 1.77× | 11.0 ms 0.95× |
| Vuelidate | 1.20 ms 0.46× | 3.20 ms 0.28× |
Off the lead here among the form-state libraries, a line we are actively sharpening.
| Library | N10 | N100 |
|---|---|---|
| Attaform | 1.80 ms 1× | 6.85 ms 1× |
| vee-validate | 1.00 ms 0.56× | 4.65 ms 0.68× |
| @tanstack/vue-form | 0.70 ms 0.39× | 2.60 ms 0.38× |
| @formisch/vue | 0.60 ms 0.33× | 1.30 ms 0.19× |
| Regle (schema) | 1.00 ms 0.56× | 6.10 ms 0.89× |
| Regle (rules) | 0.90 ms 0.5× | 5.45 ms 0.8× |
| FormKit | 1.50 ms 0.83× | 4.60 ms 0.67× |
| Vuelidate | 0.70 ms 0.39× | 2.00 ms 0.29× |
Multi-step wizard
Most of the cohort has no wizard primitive and composes a multi-step flow by hand, so this is an expressiveness comparison as much as a timing one. Where a comparable step transition exists, here is its cost; Attaform's useWizard ships the flow as a first-class shape.
Holds the middle of the form-state field on this shape.
| Library | S4 |
|---|---|
| Attaform | 0.40 ms 1× |
| vee-validate | 5.40 ms 13.5× |
| @tanstack/vue-form | 0.40 ms 1× |
| @formisch/vue | 0.10 ms 0.25× |
| Regle (schema) | 0.90 ms 2.25× |
| Regle (rules) | 0.10 ms 0.25× |
| FormKit | 2.00 ms 5× |
| Vuelidate | 0.10 ms 0.25× |
Caveats
The methodology is only as good as what it admits.
- FormKit owns its inputs. It cannot drive the shared bare field, so its re-render figure is a DOM-mutation proxy, marked in the tables, and its mount and memory figures include its own component tree. It is labeled batteries-included throughout and never placed silently beside bare-input libraries.
- Heap is Chromium-quantized.
usedJSHeapSizereports rounded magnitudes, not byte-exact values, so memory figures show whole kilobytes and the slope across sizes carries more signal than any single number. - Every cell shares one time budget. Each measured cell gets the same per-cell ceiling on the CI runner, identical for every library. A cell that cannot settle to a stable median inside it (a single mount of thousands of fields, or a full-form validation at the largest sizes on the heaviest libraries) is recorded as "did not finish" rather than dropped or estimated. The ceiling is uniform across the cohort, so it marks where a shape outgrows one measurement window, never a verdict on a library.
- Bundle is total, not first-paint. Every figure is the full minified and gzipped cost with the validator weighed in. Vue is external, since every app ships it once. Code-splitting changes what a first paint actually pulls.
- An absent score has two distinct meanings. "Not published" means a project has not opted into a Scorecard, which is a choice and not a deficiency. "Unavailable" means the lookup did not complete on that run, a network gap on our side and never a statement about the project. The viewer linked on each row shows the live result either way, and scores are point-in-time.
- Local versus CI. The committed numbers come from CI on a fixed runner. A figure stamped "local run" is illustrative shape data from a developer machine, superseded the next time CI refreshes the page.
Reproduce it yourself
The harness is meant to be run by hand. Clone the repo, build Attaform's real dist with pnpm prepack, then from apps/bench-arena install the browser and run the arena. The full instructions live in the bench-arena README. Every adapter mounts by query parameter, so you can also open a single library and scenario in a browser and watch it work.
Where to next
- Performance: Attaform's own hot-path numbers, measured against a per-PR regression gate.
- How values are stored: the slim write shape behind the keystroke and validation figures.
- Field-array mutations: the array-helper characteristics behind the dynamic-array rows.