eslint-plugin-import, a popular ESLint plugin for static analysis of ECMAScript import statements, saw a release of version 2.8.0 following version 2.7.0. Both versions, sharing the same core purpose of bringing sanity to imports, maintain identical dependencies, including modules like has, debug, doctrine, minimatch, lodash.cond, read-pkg-up, contains-path, builtin-modules, eslint-module-utils, and eslint-import-resolver-node. This ensures core functionality and compatibility remain consistent.
One key distinction lies in the devDependencies section. While version 2.7.0 specifies eslint as "3.x", version 2.8.0 broadens compatibility, declaring support for "2.x - 4.x". This indicates that version 2.8.0 has been tested and confirmed to work seamlessly across a wider range of ESLint versions, providing developers with greater flexibility in their development environment. For developers, this wider support for ESLint could be the most compelling reason to upgrade. Additionally, the difference in releaseDate also indicates the first version is more recent. Both versions maintain the same peer dependency of "eslint": "2.x - 4.x". Developers should note the peer dependency also specifies what versions of eslint the plugin is expected to work with.
The are not vulnerabilities for the version 2.8.0 of the package eslint-plugin-import