Version 1.0.4 of @eslint/eslintrc delivers a refined configuration experience for ESLint users relying on the legacy ESLintRC format. Primarily, the upgrade introduces a significant change in the js-yaml dependency, moving from version 3.13.1 to version 4.1.0. This update likely incorporates performance enhancements, bug fixes, and potentially new features offered by the newer js-yaml release, directly benefiting developers who utilize YAML-based ESLint configurations. While the espree, ignore, globals, minimatch, import-fresh, and strip-json-comments dependencies remain consistent, developers can expect improved stability and compatibility with YAML parsing due to the updated js-yaml dependency. For those concerned about development dependencies, eslint-release has been bumped from version 3.1.2 to 3.2.0.
It's also worth noting the small variation in unpackedSize between versions (640678 vs. 640703), suggesting minor code adjustments or optimizations that might subtly impact performance. The release date difference also indicates a concentrated effort to provide users with the most up-to-date and reliable tooling. In essence, adopting version 1.0.4 of @eslint/eslintrc offers developers a more robust and modern foundation for managing their ESLint configurations, ensuring that legacy ESLintRC files can be parsed reliably and efficiently.
The are not vulnerabilities for the version 1.0.4 of the package @eslint/eslintrc