Autoprefixer version 10.0.3 is a minor update over the previous stable release, 10.0.2, of this popular CSS prefixing tool for developers. Both versions share the same core functionality: parsing CSS and automatically adding vendor prefixes based on data from caniuse.com. This ensures cross-browser compatibility without developers needing to manually manage prefixes. Both versions depend on libraries such as colorette, browserslist, num2fraction, normalize-range, and postcss-value-parser to carry out their tasks.. They also require postcss as a peer dependency.
The primary difference lies within the caniuse-lite dependency. Version 10.0.3 updates this dependency to ^1.0.30001161, reflecting the most recent browser compatibility data, whereas version 10.0.2 relies on version ^1.0.30001157. This is crucial because caniuse-lite is the source of truth for browser support information, and this update in 10.0.3 ensures that developers are using the most accurate and up-to-date prefixing rules. Furthermore, there is a slight change in unpacked size, with version 10.0.3 being negligibly larger (246135 bytes) compared to version 10.0.2 (246044 bytes), probably due to the updated data in caniuse-lite. The release date of version 10.0.3 is also later which shows it contains the newer data.
For developers, upgrading to version 10.0.3 is recommended to benefit from the latest browser support information and achieve optimal cross-browser compatibility with minimal effort. This ensures generated CSS is properly prefixed for the widest range of browsers based on the latest industry data.
The are not vulnerabilities for the version 10.0.3 of the package autoprefixer