Angular's @angular/common package provides essential directives and services for building Angular applications, and versions 10.2.3 and 10.2.4 offer similar core functionalities. Both versions share the same dependencies on tslib (version ^2.0.0), ensuring compatibility with TypeScript helper functions, and peer dependencies on rxjs (^6.5.3) for reactive programming and @angular/core. The file count and unpacked size are identical too.
The significant difference lies in the version of @angular/core they peer with, with 10.2.3 requiring @angular/core of the same version and 10.2.4 requiring @angular/core 10.2.4. This tightly couples @angular/common to its corresponding core version. Consequently, developers upgrading to Angular 10.2.4 must also update @angular/core and @angular/common to maintain compatibility and leverage any bug fixes or performance improvements introduced in these specific releases.
The updated releaseDate also highlights this; version 10.2.4 was released on December 17, 2020, significantly later than 10.2.3 in November 2020. Developers should always aim to use the same family of versions of Angular packages, and this update highlights that.
The are not vulnerabilities for the version 10.2.4 of the package @angular/common