Version Details and Security Vulnerabilities

📦

@typescript-eslint/parser

3.7.1

Comparision Betweeen 3.7.1 and 3.7.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

89.12 KB

88.95 KB

Version 3.7.1 Details

The @typescript-eslint/parser package, a crucial tool for ESLint integration with TypeScript projects, saw a minor version update from 3.7.0 to 3.7.1. Both versions provide an ESLint custom parser leveraging TypeScript ESTree, enabling developers to lint their TypeScript code effectively. Examining the package data reveals subtle differences, primarily centered around updated dependencies and release details.

Version 3.7.1 depends on newer versions of internal packages like @typescript-eslint/types, @typescript-eslint/typescript-estree, and @typescript-eslint/experimental-utils, all bumped from 3.7.0 to 3.7.1 which likely include bug fixes and minor improvements. This ensures compatibility and stability within the @typescript-eslint ecosystem. Similarly, the devDependencies have been updated to the latest 3.7.1 version of @typescript-eslint/shared-fixtures from 3.7.0.

From a practical standpoint, developers upgrading from 3.7.0 to 3.7.1 can anticipate a smoother linting experience with potential bug fixes and refinements incorporated into the underlying parsing and AST generation. The core functionality remains consistent, but this upgrade ensures alignment with the latest improvements within the @typescript-eslint project. Both versions maintain the same peer dependency requirement for ESLint (versions 5, 6, or 7). Considering the minor version bump and dependency updates, the upgrade process should be straightforward, providing enhanced reliability without introducing breaking changes. The updated version was released a week after the previous one, hinting that it could be a quick fix of a bug and not an invasive update.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.