Eslint-plugin-standard, a crucial tool for developers adhering to the Standard JavaScript style guide, saw a subtle but potentially significant update between versions 2.3.0 and 2.3.1. While both versions maintain the same core functionality and MIT license, a key difference lies in their dependency specifications. Version 2.3.0 declares a development dependency and peer dependency on eslint version ^3.19.0. Version 2.3.1, in contrast, reduces the eslint development dependency and peer dependency to >=3.0.0.
This change in version 2.3.1 is noteworthy for developers managing their project dependencies. Bumping the version compatibility makes eslint-plugin-standard accessible to a broader range of projects utilizing older ESlint versions, specifically those within the 3.0.x series. If you are tied to a specific eslint version, version 2.3.1 might be an interesting choice. Both versions share identical core dependencies, relying on mocha for testing and standard (at any version) for linting within the development environment. They are both authored by Jamund Ferguson and available on npm. Developers should carefully evaluate which version aligns with their existing ESLint setup to ensure compatibility and avoid potential conflicts. The release date difference between the versions amount to less than a minute, making clear this is a micro update.
The are not vulnerabilities for the version 2.3.1 of the package eslint-plugin-standard