Eslint-plugin-import, a vital tool for JavaScript developers seeking to enforce import statement best practices and code sanity, saw a release of version 1.10.0 on June 30, 2016, building upon the previous stable version 1.9.2 released on June 21, 2016. While both versions share a common goal and core dependencies like pkg-up, es6-map, es6-set, lodash.* and development dependencies focused on testing (Chai, Mocha, Gulp, etc.) and linting (eslint, babel-eslint), a key change in 1.10.0 involved the introduction of contains-path as a new dependency. This suggests that the new release might incorporate enhanced path analysis or validation capabilities, improving the plugin's ability to understand and enforce import rules related to file paths. Both version relies on peer dependency eslint":"2.x. Developers should carefully review the changelog or release notes associated with version 1.10.0 to fully understand how to leverage the new features or address any potential compatibility issues arising from that new contains-path dependency. Keep in mind that even if new features are not obviously visible, bug fixes can improve overall quality of code analysis which is the main goal of the tool. Consider testing the new major release in a separate environment before upgrading your main project.
The are not vulnerabilities for the version 1.10.0 of the package eslint-plugin-import