Command-line-usage, a helpful tool for generating command-line help messages, saw a minor update from version 2.0.3 to 2.0.4. While the core functionality remained consistent, several dependency upgrades subtly refined its performance and compatibility. Most notably, array-back was bumped from version 1.0.2 to 1.0.3, and column-layout moved from 2.1 to 2.1.1. Also, ansi-escape-sequences was improved from version 2.2.0 to 2.2.2. The older version, 2.0.3, relied on object-tools as a dependency, but this dependency was removed in 2.0.4, streamlining the package's footprint. Development dependencies also saw updates, with tape increasing from version 4.4.0 to 4.5.1, jsdoc-to-markdown going from 1.3.3 to 1.3.6 and babel-preset-es2015 updating from 6.5.0 to 6.6.0.
These changes suggest improvements in testing, documentation generation, and ES2015 compatibility during development. For developers using command-line-usage, upgrading to 2.0.4 offers a more refined and up-to-date experience, albeit with minimal impact on the core functionality of generating usage information. From a high-level perspective the core dependencies like typical and feature-detect-es6 remained the same. The update may specifically be important for users that have specific compatibility issues with the previous dependency versions or that want to take advantage of the newest tape or jsdoc-to-markdown features.
All the vulnerabilities related to the version 2.0.4 of the package
Prototype Pollution in deep-extend
Versions of deep-extend
before 0.5.1 are vulnerable to prototype pollution.
Update to version 0.5.1 or later.