Cssnano, a modular CSS minifier built upon the PostCSS ecosystem, saw a release of version 5.0.7 shortly after version 5.0.6. Examining the changes between these two versions reveals key updates relevant to developers. Notably, version 5.0.7 replaces the cosmiconfig dependency with yaml and lilconfig. Developers using version 5.0.6 should be aware of this dependency shift. They should confirm whether they need to manage the new dependencies. These modifications potentially impact configuration loading and handling within cssnano, making it crucial for developers to adjust their configurations accordingly.
Furthermore, the unpacked size of the package has slightly increased from 7667 bytes in version 5.0.6 to 8042 bytes in version 5.0.7. Despite the change in dependencies, both versions maintain consistent peer dependencies, requiring postcss version ^8.2.15. In both versions, cssnano aims to optimize CSS code using the cssnano-preset-default also in its 5.1.3 version. Developers upgrading to 5.0.7 should test their existing setups to ensure smooth operation with the new dependency structure of cssnano, and should keep up-to-date their dependencies for optimal compression.
The are not vulnerabilities for the version 5.0.7 of the package cssnano