array.from versions 1.0.1 and 1.0.2 are both robust and optimized polyfills for the ECMAScript 6 Array.from method, enabling developers to use this modern array creation technique even in older JavaScript environments.
The key differences between the versions lie within their dependency updates and associated tooling. Version 1.0.2 upgrades the es-abstract dependency from version 1.5.0 to 1.5.1, potentially pulling in bug fixes or minor enhancements related to ECMAScript specification adherence. More significantly, the development dependencies receive several updates. @es-shims/api jumps from version 1.0.0 to 1.2.0, tape increases from 4.4.0 to 4.6.0, eslint from 1.10.3 to 2.13.1 and @ljharb/eslint-config advances drastically from 1.6.1 to 5.0.0. These updates primarily affect the development environment, likely bringing improvements to testing, linting, and code style enforcement.
For developers using array.from, these dependency changes mean that the later version may offer a more consistent and spec-compliant polyfill thanks to es-abstract and provide a better local development experience during integration. However, the core functionality remains the same: providing a reliable Array.from implementation across different JavaScript engines. If you're not contributing to the library itself, the 1.0.2 offers the latest stability and minor potential improvements. Version 1.0.2 was released on June 24th, 2016, while version 1.0.1 was released earlier, on March 29th, 2016.
The are not vulnerabilities for the version 1.0.2 of the package array.from