Version Details and Security Vulnerabilities

📦

commander

3.0.2

Comparision Betweeen 3.0.2 and 3.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

76.12 KB

76.02 KB

Version 3.0.2 Details

Commander.js, a popular Node.js package for building command-line interfaces, saw a bump from version 3.0.1 to 3.0.2 in September 2019. While seemingly a small increment, the update brought refinements that developers should be aware of. Both versions maintain the core functionality of providing a complete solution for crafting robust command-line tools. They share the same MIT license, author, and repository, ensuring continued open-source support and contribution.

Examining the developer dependencies reveals subtle but important shifts. Version 3.0.2 includes newer versions of several key tools. Sinon, a popular mocking and stubbing library for testing, is updated from ^7.4.1 to ^7.5.0. Linter ESLint sees an upgrade from ^6.1.0 to ^6.4.0, likely incorporating new linting rules and code style improvements. TypeScript, a language superset of JavaScript, moves from version 3.5.3 to 3.6.3, promising enhanced type safety and modern language features. Node.js type definitions also receive a bump from ^12.7.2 to ^12.7.8.

These updates suggest a focus on improved code quality, maintainability, and compatibility with the latest JavaScript standards. The unpacked size of the package also slightly increased, from 77846 to 77942, possibly indicating the inclusion of minor feature enhancements or bug fixes, even though no such data exists in the information provided. The release date of 3.0.2 is approximately a month after 3.0.1, meaning is probably addressing a patch or minor bug fix found on the previous potentially stable version. For developers using Commander.js, upgrading to 3.0.2 means leveraging the latest tooling and benefiting from any stability improvements incorporated through these dependency updates.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.