A full version history of the aud package with size, number of distributed files and dependency evolution.
aud is an npm package designed to streamline security auditing in JavaScript projects. It offers a convenient alternative to npm audit, ensuring comprehensive vulnerability checks whether a lockfile is present or not, easily accessible with the command npx aud. The package has evolved through several versions, demonstrating continuous improvement and adaptation to the changing landscape of JavaScript development.
Early versions, such as 1.0.0 and 1.1.x, focused on core functionality, establishing the foundational use of npx aud and gradually updating dependencies like libnpx and semver for enhanced compatibility and performance. Version 1.1.2 introduced util.promisify as a dependency. The 2.0.0 release represented a significant shift. It replaced dependencies like chalk and fs-copy-file with tmp and colors and updated npm-lockfile to version 3.0.1, showcasing a commitment to modern tooling. Subsequent 2.0.x versions refined this new direction, incorporating pacote and rimraf while consistently updating development dependencies for improved code quality and testing.
The jump to version 3.0.0 signaled another major update, upgrading tmp and npm-lockfile dependencies and reflecting the package's ongoing effort to stay compatible with the latest ecosystem standards. Each version increment, including the latest 3.0.1, underscores the dedication of the author, Jordan Harband, to providing a reliable and up-to-date security auditing solution for JavaScript developers. The consistent updates to both dependencies and devDependencies highlight a proactive approach to security and maintainability.