Version Details and Security Vulnerabilities

📦

bootstrap

5.2.0

Comparision Betweeen 5.2.0 and 5.1.3

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

213

189

Unpacked Size

8.59 MB

8.25 MB

Version 5.2.0 Details

Bootstrap 5.2.0 represents an iteration on the widely-used Bootstrap front-end framework, building upon the foundation laid by version 5.1.3 and delivering several notable refinements that developers will appreciate. One key difference lies in the updated development dependencies. Version 5.2.0 sees newer iterations of key tools like Sass, ESLint, Rollup, Terser, PostCSS, and Autoprefixer, reflecting the evolving landscape of web development tooling. The new version drops cspell but adds tools like @babel/cli, @babel/core, bundlewatch, npm-run-all, postcss-cli, clean-css-cli, karma-jasmine, lockfile-lint, @rollup/plugin-babel, eslint-plugin-import, eslint-plugin-unicorn, karma-chrome-launcher, karma-detect-browsers, @rollup/plugin-replace, eslint-plugin-markdown, karma-firefox-launcher, rollup-plugin-istanbul, @rollup/plugin-commonjs, karma-browserstack-launcher, karma-jasmine-html-reporter, stylelint-config-twbs-bootstrap showing the efforts for testing and maintanability are increasing .

The peer dependency @popperjs/core has been updated from 2.10.2 to 2.11.5, ensuring compatibility and leveraging the latest features and fixes offered by the Popper.js library for managing tooltips and popovers. Also, the unpacked size of version 5.2.0 has slightly increased, now at 9002835, compared to 8650714 in version 5.1.3. This small increment can be attributed to new features, enhancements, or adjustments made to the framework's components and utilities. The number of files in the distribution increased from 189 to 213. Developers upgrading should consider these changes for potential impact on project size and performance. Finally, version 5.2.0 includes new author's funding options, adding Github sponsors to the existing Open Collective.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.