Version Details and Security Vulnerabilities

📦

@rollup/plugin-commonjs

28.0.5

Comparision Betweeen 28.0.5 and 28.0.4

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

257.57 KB

257.46 KB

Version 28.0.5 Details

The @rollup/plugin-commonjs package, a vital tool for converting CommonJS modules into the modern ES2015 format for use with Rollup, has released version 28.0.5, building upon the solid foundation of version 28.0.4. Both versions share identical dependencies and peer dependencies indicating no critical changes. Developers using the plugin can expect seamless upgrades without ripple effects on their other packages. Core functionalities around leveraging fdir, commondir, picomatch, is-reference, magic-string, estree-walker, and @rollup/pluginutils remains the same, ensuring consistent conversion of CommonJS modules. Development dependencies, including Rollup itself, source map tooling, Typescript, and other plugins like @rollup/plugin-json and @rollup/plugin-node-resolve, also remain consistent.

The key difference lies within the dist metadata. Version 28.0.5 has a slightly larger unpacked size of 263749 bytes compared to version 28.0.4 with 263640 bytes. This 109 byte difference might be due to very minor changes in code or documentation. Both versions have the same file count of 8, indicating similar code structure. The time between releases is about 2 minutes which suggest to be a patch and may address bug-fixes or minor adjustments identified shortly after the release of 28.0.4. Developers should consult the changelog or repository for detailed information to understand the changes between these versions and decide to adopt the newest version. Dates of release are set to be in the future (2025), this information might be incorrect.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.