Version Details and Security Vulnerabilities

📦

@rollup/plugin-commonjs

27.0.0

Comparision Betweeen 27.0.0 and 26.0.3

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

256.58 KB

252.29 KB

Version 27.0.0 Details

@rollup/plugin-commonjs version 27.0.0 brings subtle but potentially important updates compared to the previous stable version, 26.0.3. The core functionality remains the same: converting CommonJS modules into ES2015 for modern JavaScript development with Rollup. The dependency list is identical, encompassing crucial tools such as glob for file matching, magic-string for efficient string manipulation, estree-walker for AST traversal, and @rollup/pluginutils for Rollup plugin utilities. Development dependencies also remain consistent, ensuring compatibility with tools like rollup v4, typescript, and other Rollup plugins.

The peerDependencies section stays the same, indicating that the plugin continues to support Rollup versions 2.68.0, 3.x, and 4.x. Both versions are released under the MIT license and maintained in the same repository.

The noticeable differences lie in the dist metadata, specifically unpackedSize. Version 27.0.0 reports an unpacked size of 262742 bytes, slightly larger than version 26.0.3's 258349 bytes. This increase hints at internal code adjustments, potentially including bug fixes or performance enhancements, although the nature of these changes isn't explicitly stated. The only other difference is that version 27.0.0 was released after version 26.0.3.

For developers, upgrading to version 27.0.0 is recommended, expecting the same features as before, but possibly with performance or stability improvements. A full changelog is recommended to be researched to be completely sure.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.