Browserslist version 4.16.1 is a minor update to the popular library that allows developers to share target browsers between various front-end tools such as Autoprefixer, Stylelint, and babel-env-preset. Comparing it to the previous stable release, version 4.16.0, the key differences lie in the updated dependencies. Specifically, caniuse-lite has been updated from version 1.0.30001165 to 1.0.30001173, node-releases jumps from 1.1.67 to 1.1.69, and electron-to-chromium moves from 1.3.621 to 1.3.634. These updates reflect the ongoing evolution of browser support and Electron releases.
For developers, this means improved accuracy in targeting specific browser versions and features when using Browserslist with other tools. The core functionality of sharing browser targets remains the same, but the updated dependencies ensure that the browser support data is as up-to-date as possible. While the unpacked size and fileCount remains very similar, the release date of 4.16.1 indicates a more recent update reflecting active maintenance. If you want to use the library, remember to update to the newest as you will be using new browsers versions definition.
All the vulnerabilities related to the version 4.16.1 of the package
Regular Expression Denial of Service in browserslist
The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.