@storybook/addon-viewport is a valuable tool for Storybook developers, enabling precise control over viewport sizes to ensure responsive design across various mobile devices. Version 6.1.4 builds upon the foundation of 6.1.3, maintaining identical core functionalities like viewport customization through a user-friendly interface. Developers leveraging this addon can quickly simulate different screen dimensions, streamlining their responsive testing workflow directly within the Storybook environment.
A key distinction lies in the internal package dependencies. Version 6.1.4 updates its internal dependencies such as @storybook/api, @storybook/addons, @storybook/theming, @storybook/components, @storybook/core-events, and @storybook/client-logger from version 6.1.3 to 6.1.4 which indicates a synchronized update across the Storybook ecosystem. While the core logic and external API of the viewport addon likely remain consistent across these versions, this update brings the benefit of potential bug fixes, performance improvements, and alignment with the latest features offered by other Storybook components. The file count and unpacked size remain the same, suggesting that there were no significant new features, assets or increased complexity added. Therefore, developers already using version 6.1.3 can seamlessly upgrade to 6.1.4 expecting primarily under-the-hood improvements and remain current with the Storybook infrastructure. The release date signifies that version 6.1.4 is the newer version, implying the updated dependencies provide the latest advantages.
All the vulnerabilities related to the version 6.1.4 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.