Version Details and Security Vulnerabilities

📦

@rollup/plugin-commonjs

28.0.2

Comparision Betweeen 28.0.2 and 28.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

256.98 KB

256.95 KB

Version 28.0.2 Details

@rollup/plugin-commonjs version 28.0.2 introduces incremental improvements over version 28.0.1, primarily focusing on internal refinements and potential bug fixes, while maintaining compatibility. Both versions serve the crucial purpose of converting CommonJS modules into the ES2015 format, enabling seamless integration of older JavaScript codebases into modern, modular workflows orchestrated by Rollup. The core dependencies, including fdir, commondir, picomatch, is-reference, magic-string, estree-walker, and @rollup/pluginutils, remain consistent, ensuring that the fundamental mechanisms for module resolution and transformation are stable.

Developers leveraging either version can expect reliable CommonJS to ES module conversion, essential for projects aiming to utilize Rollup's efficient bundling capabilities with existing CommonJS modules. The peer dependency on rollup versions ^2.68.0, ^3.0.0, or ^4.0.0 ensures compatibility with a wide range of Rollup versions, offering flexibility for projects with varying Rollup dependencies. Although the listed development dependencies, such as typescript, @rollup/plugin-json, and @rollup/plugin-node-resolve, are identical, it's worth noting that the newer version may contain subtle, undocumented enhancements or bug fixes affecting the build process or compatibility with other plugins. The slight increase in unpacked size in version 28.0.2 might indicate minor adjustments in internal code or assets. Developers encountering issues with version 28.0.1 might find upgrading to 28.0.2 beneficial, though a thorough testing process is always recommended when updating dependencies, especially during major version upgrades of Rollup or related plugins. Ultimately, both versions provide a solid foundation for bridging the gap between CommonJS and ES modules within a Rollup-powered build pipeline.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.