Version Details and Security Vulnerabilities

📦

autoprefixer

10.3.6

Comparision Betweeen 10.3.6 and 10.3.5

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

190.81 KB

219.67 KB

Version 10.3.6 Details

Autoprefixer 10.3.6 is a minor update to the popular CSS prefixing tool, building upon version 10.3.5. Both versions parse CSS and automatically add vendor prefixes to ensure compatibility across different browsers, leveraging data from the "Can I Use" website. This eliminates the need for developers to manually manage browser-specific prefixes, streamlining the CSS writing process and improving maintainability. Key dependencies like fraction.js, browserslist, normalize-range, and postcss-value-parser remain consistent between the two versions, providing a stable foundation for prefixing.

The most notable difference lies in the updated dependencies: nanocolors moves from version 0.1.5 to ^0.2.8 and caniuse-lite jumps from version ^1.0.30001259 to ^1.0.30001260. These updates likely include bug fixes, performance improvements, and potentially expanded browser support information within the caniuse-lite database. While specific details of these internal updates aren't provided, users can expect enhanced reliability and potentially broader prefixing coverage. Furthermore, the unpacked size of version 10.3.6 is significantly smaller, hinting at potential optimizations or refactoring improvements. Developers should consider upgrading to version 10.3.6 to benefit from the latest bug fixes, and potentially smaller bundle size. The peer dependency on postcss ensures compatibility with PostCSS version 8.1.0 or higher, consistent across both versions.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.