Version Details and Security Vulnerabilities

📦

@rollup/plugin-commonjs

11.0.2

Comparision Betweeen 11.0.2 and 11.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

194.53 KB

188.25 KB

Version 11.0.2 Details

Version 11.0.2 of @rollup/plugin-commonjs introduces several updates compared to the previous stable version, 11.0.1, aimed at improving developer experience and compatibility. Notably, a key dependency, estree-walker, has been upgraded from version 0.6.1 to version 1.0.1. This likely brings performance enhancements or bug fixes within the Abstract Syntax Tree (AST) traversal process, crucial for CommonJS module conversion.

Significant changes are also apparent in the development dependencies. Acorn, the JavaScript parser, jumps from version 6.1.1 to 7.1.0, potentially providing support for newer JavaScript syntax features. The core Rollup dependency advances from version 1.16.2 to 1.27.14, incorporating a range of bug fixes and improvements from the Rollup ecosystem. Babel dependencies, including @babel/core, @babel/register, and @babel/preset-env, see upgrades from the 7.4.x series to the 7.7.x series, ensuring better compatibility with modern JavaScript transformations and syntax.

Furthermore, @rollup/plugin-json is bumped from version 4.0.0 to 4.0.1, while @rollup/plugin-node-resolve goes from 6.0.0 to 7.0.0, indicating enhanced interoperability between the CommonJS plugin and other Rollup plugins. Several development dependency tools like husky, mocha, eslint, and lint-staged were removed to streamline the development process. These upgrades collectively suggest a focus on keeping the plugin up-to-date with the evolving JavaScript landscape and improving the overall development workflow for contributors. The plugin maintains its MIT license and continues to be authored by Rich Harris, ensuring continuity and community trust.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.