@storybook/addon-viewport is a valuable Storybook addon that empowers developers to build and test responsive UI components directly within their Storybook environment. It allows you to simulate different screen sizes and orientations, mimicking how your components will appear on various devices like desktops, tablets, and mobile phones. This eliminates the need for constant resizing of your browser window and simplifies the process of ensuring consistent responsiveness across platforms.
Comparing versions 6.1.21 and 6.1.20 reveals a subtle but important distinction. While the core functionality of the addon remains the same – providing viewport control within Storybook – the key change lies within the dependencies. Version 6.1.21 updates the internal Storybook package dependencies. Specifically, @storybook/api, @storybook/addons, @storybook/theming, @storybook/components, @storybook/core-events, and @storybook/client-logger are all bumped from version 6.1.20 to 6.1.21.
For developers, this means that upgrading to version 6.1.21 brings compatibility and alignment with the broader Storybook ecosystem at version 6.1.21. This ensures that the viewport addon benefits from any bug fixes, performance improvements, or feature additions included in those core packages. While the viewport addon itself may not introduce new features in this incremental update, staying on the latest version guarantees a smoother, more stable, and better-integrated Storybook development experience.
All the vulnerabilities related to the version 6.1.21 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.