Version Details and Security Vulnerabilities

📦

@eslint-community/eslint-utils

4.7.0

Comparision Betweeen 4.7.0 and 4.6.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

471.61 KB

465.61 KB

Version 4.7.0 Details

Version 4.7.0 of @eslint-community/eslint-utils introduces several modifications compared to the previous stable version, 4.6.1, making it a worthwhile upgrade for ESLint plugin developers. Both versions maintain the core functionality of providing utilities for ESLint plugins and share fundamental dependencies like eslint-visitor-keys.

The key changes lie primarily within the development dependencies. Version 4.7.0 includes updated types for @typescript-eslint/parser and @typescript-eslint/types, jumping from version 5.62.0 in both cases. This brings the package in line with more recent TypeScript ESLint tooling improving compatibility and leveraging enhanced features for static analysis during development. This upgrade could be particularly beneficial for developers of ESLint plugins who are using TypeScript.

Furthermore, the inclusion of c8 for code coverage reporting, knip for finding unused files, mocha for testing, warun, eslint, opener, rimraf, rollup, semver, dot-prop, prettier, vitepress, typescript, npm-run-all2, @types/eslint, @types/estree, installed-check, rollup-plugin-dts, rollup-plugin-sourcemaps and @eslint-community/eslint-plugin-mysticatea illustrates a continued emphasis on robust development practices and comprehensive testing. While many of these tools are shared with version 4.6.1, maintaining up-to-date development dependencies ensures a smoother, more secure, and feature-rich development experience.

Notably, fileCount increase from 9 to 10 and unpackedSize has also increased from 476789 to 482928 reflecting internal changes. The releaseDate is also a major difference, 2025-05-02 being the newer date in version 4.7.0.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.