Version Details and Security Vulnerabilities

Eslint-plugin-react has a new update. Version 7.0.0 introduces important changes compared to the previous stable version 6.10.3, primarily focusing on dependency updates and internal improvements. A notable difference is the shift in the doctrine dependency. Version 7.0.0 upgrades to version ^2.0.0 of doctrine, while version 6.10.3 uses ^1.2.2. This upgrade likely incorporates bug fixes, performance enhancements, and potentially new features within the doctrine library, which developers utilize to parse JavaScript comments.

Another key change is the removal of direct dependencies object.assign and array.prototype.find. This suggests the codebase has probably been refactored to either utilize native implementations or rely on polyfills provided by the user's environment. The eslint peer dependency has changed from ^2.0.0 || ^3.0.0 to ^3.0.0 . This indicates a strong recommendation or requirement to upgrade to at least ESLint version 3.0.0 to ensure compatibility and access to the latest linting features. While both versions share common dependencies like has, jsx-ast-utils, and devDependencies like mocha, istanbul, coveralls and babel-eslint, the updated dependencies in version 7.0.0 could impact the plugin's behavior and performance. Developers should test their React projects after upgrading to ensure a smooth transition. The release date shows that version 7 was released about one month after version 6.