Version Details and Security Vulnerabilities

📦

eslint-config-standard

5.3.4

Comparision Betweeen 5.3.4 and 5.3.3

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

N/A

Version 5.3.4 Details

Eslint-config-standard version 5.3.4 represents a minor update over the previous stable release, version 5.3.3, focusing primarily on dependency adjustments. The core functionality of providing a shareable ESLint configuration adhering to JavaScript Standard Style remains consistent. For developers already using version 5.3.3, the upgrade to version 5.3.4 necessitates a careful review of the updated dependency, specifically ESLint.

The key difference lies in the devDependencies. Version 5.3.4 bumps the supported ESLint version to "^3.0.0", whereas version 5.3.3 supported "^2.9.0". This change implies that developers need to ensure their project utilizes ESLint version 3 or higher to maintain compatibility and avoid potential issues. The other dependencies, including eslint-plugin-promise, eslint-plugin-standard, and tape, remain unchanged.

The peerDependencies which define the required versions of dependencies a project needs to function correctly with the config remain unchanged in both versions. This indicates that projects using the library will continue to need eslint-plugin-promise and eslint-plugin-standard at version 1.0.8 and 1.3.1 respectively.

This update highlights the importance of staying current with ESLint's ecosystem. While seemingly minor, the update to ESLint might introduce new rules or change the behavior of existing rules. Developers should consult ESLint's release notes for a comprehensive understanding of these changes before upgrading. For new adopters of eslint-config-standard, starting with version 5.3.4 is recommended, provided their project already utilizes ESLint version 3 or later.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.