@webpack-contrib/defaults is a valuable tool for streamlining webpack project configuration, providing pre-built defaults and boilerplate to accelerate development. Comparing version 6.3.0 with the previous stable version 6.2.0 reveals some subtle yet important refinements. Both versions share the same core dependencies like chalk for console styling, git-username for project initialization, and schema-utils for configuration validation. This ensures consistency in the fundamental features of the package.
The devDependencies also remain largely identical, indicating a stable development environment with tools for linting, testing, and code formatting, supporting developers in maintaining high code quality. This includes @webpack-contrib/eslint-config-webpack for consistent code style and jest along with babel-jest for robust testing. The peer dependency on webpack version ^4.3.0 is unchanged, maintaining compatibility with existing webpack 4 projects.
The key differences between the two versions lie in the dist object. Version 6.3.0 features a slight increase in fileCount (57 vs. 54) and unpackedSize (83582 vs. 81812) compared to version 6.2.0. This suggests that version 6.3.0 contains minor additions or adjustments, potentially including bug fixes, performance improvements, or updated documentation. The releaseDate also highlights a later build date for version 6.3.0, implying updated refinements. While the core functionality remains consistent, developers are encouraged to upgrade to version 6.3.0 to benefit from these potential improvements, bug fixes, and optimizations.
All the vulnerabilities related to the version 6.3.0 of the package
Prototype Pollution Vulnerability in parse-git-config
An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function.