Bluebird is a popular, full-featured Promise library for JavaScript, known for its performance and adherence to the Promises/A+ standard. Comparing versions 3.5.3 and 3.5.2, reveals subtle but potentially important differences. Both versions share the same core description, license (MIT), repository, and author information, indicating a consistent commitment to the library's purpose and maintenance.
The key distinction lies in the devDependencies. While most dependencies remain the same, acorn sees an update from version ^0.6.0 in 3.5.2 to ^6.0.2 in 3.5.3 and acorn-walk appears in the newer version with ^6.1.0. This is interesting because it's likely a security update or bug fixing. Furthermore, a notable difference exists in the dist object, specifically the unpackedSize. Version 3.5.3 has an unpackedSize of 620138 bytes, marginally larger than the 620110 bytes of version 3.5.2. This suggests minor additions, potentially bug fixes, or internal optimizations within the newer version which required the acorn and acorn-walk upgrades.
In summary, developers should favor version 3.5.3 for its potentially improved stability and security due to these dependency updates. Before doing it it is advisable to check acorn's changelog to understand the potential breaking changes linked to its upgrade.
The are not vulnerabilities for the version 3.5.3 of the package bluebird