Version Details and Security Vulnerabilities

📦

@rollup/plugin-commonjs

12.0.0

Comparision Betweeen 12.0.0 and 11.1.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

277.21 KB

273.62 KB

Version 12.0.0 Details

@rollup/plugin-commonjs version 12.0.0 introduces updates and refinements over the preceding version 11.1.0, primarily affecting the development dependencies but bringing with it indirect implications for developers using the plugin. Both versions share the core functionality of converting CommonJS modules to ES2015 for seamless integration with Rollup.js, maintaining essential dependencies like glob, resolve, commondir, is-reference, magic-string, estree-walker, and @rollup/pluginutils.

The notable changes reside in the devDependencies. Version 12.0.0 upgrades several development dependencies including acorn (from 7.1.0 to 7.1.1), rollup (from 2.0.0 to 2.3.4), @babel/core (from 7.7.7 to 7.9.0), @babel/register (from 7.7.7 to 7.9.0), and @babel/preset-env (from 7.7.7 to 7.9.0). These upgrades likely introduce performance improvements, bug fixes, and potentially new features during the plugin's development and testing phases. Although version 12.0.0 maintains the same external API, these internal upgrades can result in a more robust and reliable plugin. The peer dependency rollup changes from "^1.20.0||^2.0.0" to "^2.3.4", restricting the usage to the newer version.

For developers, these updates suggest enhanced stability and compatibility with the latest tooling ecosystem. Upgrading to version 12.0.0 can indirectly benefit projects by leveraging the improvements in the underlying development tools, leading to potentially faster build times and fewer compatibility issues. Make sure that your Rollup version is compatible before update the package.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.