Cssnano version 5.1.5 introduces notable changes compared to version 5.1.4, primarily concerning its dependencies. Both versions, acting as modular CSS minifiers built upon the PostCSS ecosystem, share a foundation in their core functionality and licencing under MIT. However, the newer version demonstrates a shift in dependency management.
Specifically, cssnano-preset-default moves from a wildcard ^* dependency in version 5.1.4 to a specific version ^5.2.5 in 5.1.5, offering a more controlled and predictable environment regarding preset updates and potential breaking changes. Additionally, cssnano-preset-advanced bumps from version 5.2.5 to 5.3.1, while cssnano-preset-lite jumps from 2.1.0 to 2.1.2. Developers should be aware of these preset version updates, as they could influence minification results.
Beyond dependency updates, the unpacked size shows a slight increase from 7396 to 7400, suggesting the new version includes minor adjustments or additions to the codebase. Both depend on postcss and autoprefixer versions, ensuring compatibility with up-to-date tooling. Developers should upgrade to version 5.1.5 to leverage the bug fixes and feature improvements incorporated within the upgraded dependencies. They must also verify if these upgrades cause any impact related to their CSS codebase after minification using cssnano.
The are not vulnerabilities for the version 5.1.5 of the package cssnano