Version Details and Security Vulnerabilities

📦

array.from

1.1.3

Comparision Betweeen 1.1.3 and 1.1.2

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

29.26 KB

27.95 KB

Version 1.1.3 Details

Array.from, a robust polyfill for the ECMAScript 6 specification, sees a minor update from version 1.1.2 to 1.1.3. Both versions share the same core description, providing developers with a reliable and optimized method for converting array-like objects and iterables into true arrays, a crucial feature for ensuring cross-browser compatibility and modern JavaScript functionality in older environments.

The key difference lies in the updated dependency on es-abstract, moving from version 1.19.3 to 1.19.4. While seemingly small, this update could include important bug fixes, performance improvements, or adherence to the latest ECMAScript standards within the es-abstract library, which handles the abstract operations behind the Array.from implementation. Developers should check the changelog of es-abstract for detailed information on what this update entails and if it impacts their specific use case.

Beyond this, both versions maintain identical development dependencies, licensing under the MIT license, and the same author information and repository details. The package provides a consistent API and commitment to ES6 conformity. The slight increase in unpackedSize from 28620 to 29965 bytes in version 1.1.3 hints at potentially added code or data within the es-abstract dependency. Developers relying on precise bundle sizes might want to investigate this further. Both versions were released on the same day (April 12, 2022 ) which implies to a security fix on the dependency.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.