Version Details and Security Vulnerabilities

📦

@rollup/plugin-commonjs

28.0.1

Comparision Betweeen 28.0.1 and 28.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

256.95 KB

Version 28.0.1 Details

@rollup/plugin-commonjs version 28.0.1 is a minor update to the popular Rollup plugin that converts CommonJS modules into ES2015 (ESM) format, enabling seamless integration with Rollup's module bundling capabilities. The primary difference from version 28.0.0 lies in the updated dependency on the "fdir" package, moving from version ^6.1.1 to ^6.2.0 and "picomatch" moving from version ^2.3.1 to ^4.0.2.

For developers, this change primarily concerns potential bug fixes, performance improvements, or new features introduced within the "fdir" package and "picomatch". While the core functionality of @rollup/plugin-commonjs remains consistent, this update ensures compatibility with the latest features and improvements.

@rollup/plugin-commonjs is essential for projects that rely on older CommonJS modules, a common scenario when integrating with legacy codebases or third-party libraries. It enables Rollup to properly process these modules and include them in the final bundle, preventing errors and ensuring smooth operation. The plugin automatically detects CommonJS modules and transforms them into ESM, allowing Rollup to apply its optimization and tree-shaking techniques for smaller and more efficient bundles. It supports features like named exports, dynamic imports, and circular dependency resolution, making it a versatile tool for handling complex CommonJS code. Developers should update to version 28.0.1 and double-check for "fdir" and "picomatch" breaking changes if you are using it directly outside of the plugin.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.