Version Details and Security Vulnerabilities

📦

@rollup/plugin-commonjs

19.0.0

Comparision Betweeen 19.0.0 and 18.1.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

385.3 KB

375.38 KB

Version 19.0.0 Details

@rollup/plugin-commonjs version 19.0.0 introduces notable updates and refinements compared to the preceding stable version, 18.1.0, primarily concerning peer dependencies and development tooling. The core functionality, focused on converting CommonJS modules to ES2015 for seamless integration within modern JavaScript workflows, remains consistent. Developers relying on this crucial conversion will find the upgrade relatively straightforward.

A key difference lies in the peerDependencies. Version 19.0.0 specifies rollup: ^2.38.3 as a peer dependency, whereas version 18.1.0 requires rollup: ^2.30.0. This indicates an update in the plugin's compatibility requirements, ensuring it works smoothly with newer Rollup versions. Developers upgrading should verify their Rollup installation meets this requirement to avoid potential conflicts.

Additionally, there is an update in the devDependencies. Rollup has been updated from version 2.30.0 to 2.39.0. While this doesn't directly impact runtime behavior, it signifies improvements in the development and testing environment, potentially contributing to increased stability and reliability. The unpacked size has also increased, from 384390 to 394549 which might indicate additional features, optimisations or bug fixes. Package maintainers and plugin developers who contribute to the project should take note of the upgraded dev dependencies, as these may introduce changes to the build process or testing framework. Overall, the upgrade to version 19.0.0 primarily caters to ensuring compatibility with the latest Rollup ecosystem, alongside minor improvements and refinements under the hood.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.