Version Details and Security Vulnerabilities

📦

@storybook/addon-viewport

7.0.0

Comparision Betweeen 7.0.0 and 6.5.16

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

29.82 KB

63.03 KB

Version 7.0.0 Details

@storybook/addon-viewport has been updated from version 6.5.16 to 7.0.0 with significant changes impacting developers using Storybook for responsive component development. Both versions serve the same core purpose: enabling developers to build and test responsive components by adjusting Storybook's viewport. However, version 7.0.0 introduces notable dependency updates and structural changes.

A key highlight is the shift in dependencies. Version 7.0.0 adopts newer versions of core Storybook packages like @storybook/theming, @storybook/components, @storybook/core-events, @storybook/manager-api, and @storybook/preview-api, moving to version 7.0.0 to align with the main Storybook release. Version 6.5.16 relied on older, versioned dependencies such as @storybook/api and @storybook/addons at 6.5.16. The newer version also introduces @storybook/global as a dependency, which did not exist as a direct dependency in the older version. The removal of core-js and regenerator-runtime dependencies in version 7.0.0 usually indicates a transition towards modern JavaScript features and build processes.

Developers upgrading to version 7.0.0 will benefit from the improvements and features included in the Storybook 7 release. While the peer dependencies for React and React DOM remain consistent, the underlying mechanics and APIs have likely undergone changes, potentially requiring adjustments in configuration or usage. The reduction in file count and unpacked size indicates potential optimizations in the newer version, leading to faster load times and a smaller footprint. Overall, the move to version 7.0.0 signifies a migration to the latest Storybook ecosystem, with updated dependencies and potential performance enhancements, pushing developers to adopt newer practices.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.