@storybook/addon-viewport offers developers a streamlined way to simulate various screen sizes within the Storybook environment, crucial for responsive design testing. Comparing versions 6.1.5 and 6.1.4 reveals subtle but potentially impactful changes for users. The core functionality remains consistent, enabling the selection of predefined viewport sizes or the creation of custom dimensions to ensure components render correctly across different devices. Both versions share the same fundamental dependencies, including global, core-js, prop-types, and memoizerific, alongside core Storybook packages like @storybook/api, @storybook/addons, @storybook/theming, @storybook/components, @storybook/core-events, and @storybook/client-logger. They also maintain identical peer dependencies on React and React DOM, ensuring compatibility with common React setups.
The key distinction lies in the updated versions of internal Storybook dependencies within version 6.1.5. Specifically, @storybook/api, @storybook/addons, @storybook/theming, @storybook/components, @storybook/core-events, and @storybook/client-logger are all bumped from 6.1.4 to 6.1.5. This indicates that version 6.1.5 incorporates the latest bug fixes, performance improvements, and potentially new features from the core Storybook ecosystem. While these changes might not be immediately visible, they contribute to a more stable and feature-rich development experience. Developers should upgrade to 6.1.5 to benefit from these cumulative improvements and maintain compatibility with the broader Storybook environment. The release date difference suggests that 6.1.5 likely addresses issues identified shortly after the release of 6.1.4.
All the vulnerabilities related to the version 6.1.5 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.