Version Details and Security Vulnerabilities

📦

bootstrap-styl

5.0.0

Comparision Betweeen 5.0.0 and 4.0.5

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

N/A

Version 5.0.0 Details

Bootstrap-stylus is an npm package providing a Stylus-based port of Bootstrap, allowing developers to leverage the power and flexibility of Stylus CSS preprocessor with the popular Bootstrap framework. Version 5.0.0 and the previous stable version 4.0.5 both aim to bring the features of Bootstrap 3.3.5 to Stylus projects. Looking at the provided data, the core functionality and intended use remain consistent between the two versions. Both versions share identical descriptions, stating their purpose as a port of Bootstrap 3.3.5 to Stylus.

The developer dependencies are also identical, indicating a similar tooling setup for development and maintenance. Both rely on grunt for task automation, stylus for CSS preprocessing, and various grunt plugins for tasks like autoprefixing, Stylus compilation, file watching, CSS minification, file cleaning, and JavaScript uglification.

The most notable difference lies in the repository URL format. Version 5.0.0 utilizes an SSH-based Git URL (git+ssh://git@github.com/maxmx/bootstrap-stylus.git), which is more secure for developers directly contributing. Version 4.0.5 uses the standard HTTP Git URL (http://github.com/maxmx/bootstrap-stylus.git) which is good for cloning the repository or pulling from it. Additionally, a practical detail is the release date. Version 5.0.0 was released on November 13, 2015, while version 4.0.5 was released earlier, on June 23, 2015. Developers should consider the release date when evaluating which version to use, as version 5.0.0 may contain bug fixes or minor improvements implemented in the intervening months. To determine if it is worth upgrading depends on the changes done between versions and if you are affected by it or not.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.