Version Details and Security Vulnerabilities

📦

@rollup/plugin-typescript

8.3.3

Comparision Betweeen 8.3.3 and 8.3.2

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

85.88 KB

94.02 KB

Version 8.3.3 Details

@rollup/plugin-typescript version 8.3.3 represents a minor update over its predecessor, version 8.3.2, within the Rollup plugin ecosystem. Both versions provide seamless integration between Rollup and TypeScript, streamlining the process of building TypeScript projects with Rollup. The core functionalities, dependencies like "resolve" and "@rollup/pluginutils", and peer dependencies such as "tslib", "rollup", and "typescript" remain consistent. Similarly, the development dependencies, including tools like "buble," "rollup," "typescript," "@types/node," "@rollup/plugin-buble," "@rollup/plugin-commonjs," and an older version of itself "@rollup/plugin-typescript" are the same. This indicates that the underlying build and testing environment hasn't significantly changed.

The notable differences lie in the distribution metadata. Version 8.3.3 appears to have a slightly smaller unpacked size (87940 bytes) and fewer files (5) in the tarball compared to version 8.3.2 (96277 bytes and 6 files). This could indicate optimizations in the build process, potentially removing unnecessary files or improving compression. Also, version 8.3.3 was released on June 10, 2022, while version 8.3.2 was released earlier on April 13, 2022.

For developers, the upgrade from 8.3.2 to 8.3.3 is likely a low-risk proposition. The shared dependencies and peer dependencies suggest a high degree of compatibility. The smaller package size could translate to slightly faster installation and build times, however, the file count and reduced size also suggest potential fixes for issues related to these files. Developers should always consult the changelog for a comprehensive list of bug fixes and improvements.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.