Version Details and Security Vulnerabilities

📦

eslint-plugin-import-x

4.9.1

Comparision Betweeen 4.9.1 and 4.9.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

276

279

Unpacked Size

717.45 KB

720.3 KB

Version 4.9.1 Details

Eslint-plugin-import-x has released a new version, 4.9.1, building upon the stable 4.9.0. Both versions aim to bring sanity to JavaScript and TypeScript import statements, ensuring code quality and maintainability through enhanced linting rules. Developers relying on this package will be interested in the subtle but important changes made between these two releases.

Version 4.9.1 includes updates to its dependencies. Most notably, minimatch has replaced picomatch for glob matching, specifically minimatch version 10.0.1. Additionally, @typescript-eslint/utils was bumped from version 8.26.1 to 8.27.0 and rspack-resolver was bumped from 1.2.1 to 1.2.2. While seemingly small improvements, dependency upgrades often bring bug fixes, performance enhancements, and security patches from those underlying libraries so these updates should be welcomed.

Developers should also be aware that is-glob was added as a dependency in version 4.9.1. Other dependencies remain consistent between the two versions, including crucial packages like debug, tslib, semver, doctrine, stable-hash, get-tsconfig, @types/doctrine, and eslint-import-resolver-node. The peer dependency on eslint remains at "^8.57.0 || ^9.0.0" ensuring compatibility with modern ESLint versions. This update provides a more performant experience when resolving file paths based on the resolution being made to rspack-resolver with the glob matching dependency, with the added bonus of potentially improved performance and stability. The file count decreased from 279 to 276, while the unpacked size also slightly decreased which can lead to improved installation times for larger projects.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.