Version Details and Security Vulnerabilities

📦

eslint

9.5.0

Comparision Betweeen 9.5.0 and 9.4.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

402

398

Unpacked Size

2.92 MB

2.9 MB

Version 9.5.0 Details

eslint version 9.5.0 brings subtle but important updates compared to the previous stable version, 9.4.0. While both versions maintain the core functionality of an AST-based pattern checker for JavaScript, the devil is in the details of the updated dependencies. Notably, esquery has been updated from version 1.4.2 to 1.5.0. This indicates potential improvements in selector query performance or bug fixes within the esquery library, which could indirectly impact eslint's rule processing speed and accuracy. Also, the internal dependency @eslint/js has been updated from 9.4.0 to 9.5.0 to match the main package version.

Another key change lies in the @eslint/config-array dependency, updated from version 0.15.1 to 0.16.0. This indicates modification in how eslint handles configuration files, possibly introducing new configuration options, improved configuration merging logic, or enhanced error handling when dealing with complex configurations.

Furthermore, several @wdio dependencies have been bumped to version 8.38.2 whereas version 9.4.0 used older versions of the same packages. This shift enhances the testing capabilities, potentially providing better compatibility with modern browser environments and improved reporting features. It's also worth noting that the markdownlint-cli dev dependency has been updated.

Developers should consider upgrading to version 9.5.0 to benefit from these enhancements in dependency management, potential performance tweaks, and improved testing infrastructure. The update ensures that developers are leveraging the latest refinements in core tools like esquery and config-array, leading to more robust and reliable JavaScript code analysis.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.