@storybook/addon-viewport is a valuable tool for Storybook users seeking to build and test responsive components. Allowing developers to simulate various screen sizes and orientations directly within the Storybook environment, it streamlines the process of ensuring components render correctly across different devices. Comparing versions 6.1.19 and 6.1.18 reveals subtle but important changes that impact the developer experience.
The primary difference between the two versions lies in the dependencies on other Storybook packages. Version 6.1.19 updates these dependencies to their corresponding 6.1.19 versions, including @storybook/api, @storybook/addons, @storybook/theming, @storybook/components, @storybook/core-events, and @storybook/client-logger. This synchronization across the Storybook ecosystem ensures better compatibility and potentially incorporates bug fixes or performance improvements introduced in those individual packages. While the core functionality of the viewport addon remains consistent, developers should upgrade to 6.1.19 to benefit from the latest updates and ensure seamless integration with other Storybook addons and core components. The update ensures you are using the most stable and feature-rich combination of Storybook tools, reducing potential conflicts and maximizing the efficiency of your responsive design workflow. Both versions maintain the same peer dependencies on React and ReactDOM, requiring versions 16.8.0 or 17.0.0, indicating no breaking changes in terms of front-end framework compatibility.
All the vulnerabilities related to the version 6.1.19 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.