Version Details and Security Vulnerabilities

📦

@rollup/plugin-typescript

3.1.0

Comparision Betweeen 3.1.0 and 3.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

61.13 KB

53.98 KB

Version 3.1.0 Details

@rollup/plugin-typescript offers seamless integration between Rollup and TypeScript, streamlining the process of bundling TypeScript projects. Comparing versions 3.1.0 and 3.0.0, developers will find subtle but potentially impactful changes. Both versions share core dependencies like resolve and @rollup/pluginutils for module resolution and plugin utilities respectively. They also declare identical peer dependencies allowing usage of tslib versions satisfying "*", rollup versions greater than "^1.20.0" and typescript versions greater than ">=2.1.0".

While the developer dependencies appear mostly similar between the two versions, with tools like buble, tslib, rollup, typescript, @rollup/plugin-buble, and @rollup/plugin-commonjs being present in both, a crucial difference lies in the declared @rollup/plugin-typescript version within the devDependencies. Version 3.1.0 depends on itself at "^3.0.0", whereas v3.0.0 depends on a lower version "^2.0.1". This implies internal testing or usage of features introduced in 3.0 within the 3.1.0 development cycle. Furthermore, the unpacked size of v3.1.0 is 62598 bytes, larger than the 55271 bytes of v3.0.0, indicating potential additions of features, bug fixes, or internal changes that increase the overall package size. The release timing indicates that 3.1.0 came out roughly a month after 3.0.0 meaning that several bugfixes could have been added.

Developers should consider these nuances when upgrading. Carefully review the changelog between versions 3.0.0 and 3.1.0 for a complete list of changes. These changes might include bug fixes, performance improvements, or new features. Always test thoroughly after upgrading to ensure compatibility and prevent unexpected behavior in existing Rollup configurations.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.