Version Details and Security Vulnerabilities

📦

cors

2.8.5

Comparision Betweeen 2.8.5 and 2.8.4

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

19.52 KB

N/A

Version 2.8.5 Details

CORS version 2.8.5 introduces several key updates for Node.js developers seeking robust Cross-Origin Resource Sharing middleware. Released in November 2018, it builds upon the solid foundation of version 2.8.4, released in July 2017, offering improvements in development tooling and potentially performance. A notable change is the updated development dependencies leveraging tools like nyc for code coverage, after for asynchronous testing control, and a newer version of eslint for code linting reflecting evolving best practices. The previous version had istanbul for code coverage and should for assertions in tests. The express and supertest versions migrated from 4.12.4 to 4.16.3 and from 3.0.0 to 3.3.0 showing an evolution in the support of express framework.

Both versions maintain the core functionality of CORS, providing essential middleware for enabling cross-origin requests in Express.js and other Node.js web applications with dependencies such as vary and object-assign remaining consistent, ensuring backward compatibility regarding core functionality. Developers will appreciate the stability and reliability of the 'cors' package for handling complex CORS configurations and securing their APIs. The update to version 2.8.5 mostly consisted in development workflow improvements, giving a more solid suite of tools to the developers that want to contribute or test the library and improved express framework support with supertest package. This upgrade encourages developers to adopt the latest security and performance enhancements to stay current with modern web development practices.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.