Version Details and Security Vulnerabilities

📦

eslint

9.0.0

Comparision Betweeen 9.0.0 and 8.57.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

398

408

Unpacked Size

2.89 MB

2.9 MB

Version 9.0.0 Details

ESLint 9.0.0 introduces several key changes and improvements compared to the previous stable version, 8.57.1, making it a significant update for JavaScript developers. One of the most notable changes is the upgrade of espree from version 9.6.1 to 10.0.1. This ensures enhanced JavaScript parsing capabilities, supporting the latest ECMAScript features for more accurate and reliable code analysis.

A major refactor comes within the core dependencies, as eslint now depends on @eslint/js, and ships with version 9.0.0, improving internal architecture, optimizing performance, and allowing more fine-grained control over the available Javascript standards. Also, globals dependency was removed, while @types/node was added as dev dependency.

While some developer dependencies remain consistent, like testing frameworks (mocha, chai, sinon), there are adjustments such as the upgrade of glob from version 7.1.6 to version 10.0.0. Developers should be aware of potential changes this may introduce to glob pattern matching behavior in their ESLint configurations.

Furthermore, there is a slight reduction in the number of files in the distributed package, from 408 to 398, and a corresponding decrease in unpacked size, suggesting some optimization in the packaging process. These improvements in size and dependency management mean smaller and lighter distribution of the product. For developers, these updates translate into better compatibility with modern JavaScript syntax, enhanced performance, and potentially streamlined configuration and usage of ESLint in their projects. While the core functionality remains the same, the upgraded dependencies may necessitate updates to existing configurations and workflows for seamless integration.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.