The eslint-plugin-jest package offers linting rules specifically designed for Jest, ensuring code quality and best practices within Jest test suites. Comparing versions 22.13.2 and 22.13.1, the primary difference lies in the addition of typescript as a direct dependency in version 22.13.2. While typescript was included as a dev dependency in version 22.13.1, elevating it to a direct dependency in 22.13.2 might reflect an increased reliance on TypeScript features or a change in how the plugin utilizes TypeScript internally.
For developers using TypeScript, this adjustment could streamline the setup process, potentially avoiding dependency conflicts or ensuring type definitions are readily available. Otherwise, the two versions seem to have similar dependency and dev dependency sets, including essential tools like eslint, prettier, Babel, and various @typescript-eslint packages for robust code linting, formatting, and TypeScript support.
Both versions share the same peer dependency on eslint, requiring version 5 or higher, highlighting the plugin's compatibility and integration with existing ESLint configurations. The shift with TypeScript might signify a subtle optimization or improvement in the plugin's internal workings, appealing to developers focused on maintaining high-quality, type-safe Jest tests. Developers will find that the core functionalities promoted remain consistent, focusing on Jest-specific linting to catch potential errors and enforce best practices, making testing more reliable and efficient.
All the vulnerabilities related to the version 22.13.2 of the package
semver vulnerable to Regular Expression Denial of Service
Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.