Version Details and Security Vulnerabilities

📦

eslint-plugin-import

2.30.0

Comparision Betweeen 2.30.0 and 2.29.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

129

115

Unpacked Size

1.23 MB

1.16 MB

Version 2.30.0 Details

The eslint-plugin-import package, a vital tool for ensuring code quality and import statement sanity in JavaScript projects, has released a new version, 2.30.0, since December 2023's 2.29.1. This update brings several changes worth noting for developers.

Dependency updates form a core part of this release. Key dependency upgrades include hasown (from 2.0.0 to 2.0.2), object.values (from 1.1.7 to 1.2.0), is-core-module (from 2.13.1 to 2.15.1), object.groupby (from 1.0.1 to 1.0.3), object.fromentries (from 2.0.7 to 2.0.8), eslint-module-utils (from 2.8.0 to 2.9.0) and array.prototype.findlastindex (from 1.2.3 to 1.2.5). These updates likely incorporate bug fixes, performance improvements, and potentially new features from their respective packages, offering a more robust and efficient experience.

Moreover, the new release includes dependency updates in the devDependencies section. The markdownlint-cli dependency has been removed, and jsonc-parser was added and pinned to version 3.2.0, while the previous version used 0.38.0 of the markdown linter. These changes hint at alterations in the development workflow, toolchain enhancements, or adjustments to the plugin's testing and linting processes. The increased tarball size (from 1211116 to 1293852) and file count (from 115 to 129) indicate a notable expansion in functionality, potentially introducing new rules, enhanced configurations, or improved internal mechanisms.

Developers integrating or upgrading to version 2.30.0 should carefully review their configurations and test their projects to ensure compatibility and leverage the new improvements effectively. Stay updated via the official repository or npm package page for detailed release notes and migration guidance. The library is well-maintained, offering benefits in code maintainability and reducing runtime errors related to import issues.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.