Version Details and Security Vulnerabilities

📦

eslint-plugin-import

2.28.1

Comparision Betweeen 2.28.1 and 2.28.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

115

Unpacked Size

1.15 MB

Version 2.28.1 Details

The eslint-plugin-import package has released version 2.28.1, a minor update following version 2.28.0. Both versions aim to enhance the sanity of JavaScript imports within your projects, ensuring code quality and maintainability through ESLint. Examining the changes reveals subtle yet potentially relevant updates for developers.

One notable difference lies in the dependencies. Version 2.28.1 updates 'is-core-module' to version ^2.13.0, while 2.28.0 used 'is-core-module' in version ^2.12.1. Also, the newer version removes 'resolve':'^1.22.3' and adds 'array.prototype.findlastindex':'^1.2.2'. While seemingly small, updates to dependencies related to core module resolution can impact how ESLint interprets and validates import statements, possibly affecting compatibility with specific Node.js environments or module structures. Developers should test these upgrades in their projects to ensure continued proper functionality.

Beyond dependency adjustments, the core functionality and developer experience remain consistent. Both versions include robust features like checking for correct import/export syntax, resolving module paths, and enforcing import order. The devDependencies, peerDependencies, license, repository, and author information are identical, reflecting a focused update. The unpacked size also changes slightly, indicating internal modifications.

For developers already using eslint-plugin-import, upgrading to 2.28.1 provides the latest dependency updates and potential bug fixes. Given the similarities, the upgrade should be smooth, but verifying the updated core module resolution is advisable. New users can confidently use either version as a solid foundation for linting import statements and improving code organization. eslint-plugin-import is a valuable tool for any JavaScript project seeking to enforce import best practices.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.