Version Details and Security Vulnerabilities

Eslint-loader version 2.0.0 represents a significant upgrade from version 1.9.0 for developers utilizing ESLint within their webpack workflows. While core functionalities remain consistent, key differences in supported peer dependencies and development dependencies warrant attention. Both versions share identical core dependencies crucial for caching, utility functions, object manipulation, and file removal. These common dependencies ensure consistent functionality for tasks like caching linting results to improve build speed.

The most prominent change lies in webpack support. Version 2.0.0 now declares peer dependency support for webpack versions ranging from 2.0.0 up to, but not including, version 5.0.0. This expands the compatibility range, accommodating users of webpack 4, which was previously only present in devDependencies. Whereas version 1.9.0 only specified eslint as a peer dependency. This ensures that developers using eslint-loader in webpack 4 projects can seamlessly upgrade. In addition, version 2.0.0 updates the devDependencies for webpack, now specifying webpack 4.0.0, which likely reflects testing and development efforts aimed at ensuring compatibility with the newer webpack major version. This indicates that the maintainers have tested this version more thoroughly, providing greater stability. The dependency constraints in version 2.0.0 provide developers with better dependency management, ensuring compatibility and reducing potential conflicts within their projects. When upgrading, webpack 4 users should consider version 2.0.0 given its explicit support.