Version Details and Security Vulnerabilities

📦

commonmark

0.29.2

Comparision Betweeen 0.29.2 and 0.29.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

502.01 KB

421.26 KB

Version 0.29.2 Details

Commonmark version 0.29.2 represents an incremental update over version 0.29.1, bringing several changes pertinent to developers utilizing this popular Markdown parsing library. Key updates reside within the dependency structure, indicating enhancements in tooling and build processes. Notably, entities sees an upgrade from version ~1.1.1 to ~2.0. Developers should examine this change as it relates to handling HTML entities, verifying compatibility and expected output within their applications.

The development dependencies reveal significant modernization. ESLint jumps from ^4.19.1 to ^7.4.0, offering improved code linting and adherence to contemporary JavaScript standards. Rollup, a module bundler, is introduced with version ^1.29.0 offering better tree shaking and smaller bundles. Along with Rollup, several related plugins like @rollup/plugin-json, @rollup/plugin-commonjs, and @rollup/plugin-node-resolve are added suggesting a shift towards a more modern JavaScript module bundling approach. Also the package @rollup/plugin-uglify is introduced for code minification. Markdown-it gets an update from version ^8.4.1 to ^10.0. These updates suggest potential performance gains and enhanced compatibility with modern build pipelines. The updates to packages like acorn, serialize-javascript, and the addition of esm also imply improved handling of javascript and modern ecmascript syntax. Developers should carefully assess these dependency upgrades to ensure seamless integration with their existing projects, paying particular attention to changes in default behaviors and potential compatibility breaks. The update provides a generally more robust and modern toolkit for Markdown processing.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.