Version Details and Security Vulnerabilities

📦

eslint-plugin-promise

5.0.0

Comparision Betweeen 5.0.0 and 4.3.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

39.4 KB

39.25 KB

Version 5.0.0 Details

Eslint-plugin-promise offers static analysis for JavaScript promises, helping developers enforce best practices and avoid common pitfalls. Version 5.0.0 represents a significant update from version 4.3.1, primarily focusing on compatibility with newer tooling and enhanced code quality. A key difference lies in the supported ESLint version; 5.0.0 requires ESLint ^7.0.0 while 4.3.1 supports ESLint ^6.8.0. This reflects a move towards leveraging the latest ESLint features and improvements.

Several development dependencies have been updated, impacting the developer experience regarding linting, formatting, and testing. For example, eslint-config-prettier jumps from version 3.0.1 to 8.1.0 in the newer release, which suggests that the newer version of the plugin uses recent Prettier code formatting rules & recommendations, leading to potentially cleaner and more consistent code. Similarly, eslint-plugin-prettier sees an upgrade from 2.6.2 to 3.3.1. eslint-plugin-jest sees a major version bump from 23.13.1 to 24.3.4. Finally, eslint-plugin-eslint-plugin sees an upgrade from 2.2.1 to 3.0.0.

The dist section reveals a slight change in unpackedSize, increasing from 40190 to 40341, indicating potentially new rules or modifications to existing ones. Developers upgrading should be aware of the peer dependency requirement for ESLint 7 and review their ESLint configuration to ensure compatibility and leverage any new rules or settings introduced in version 5.0.0. This upgrade aims to provide a more robust and modern linting experience for promise-based JavaScript code.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.