Version Details and Security Vulnerabilities

📦

fast-xml-parser

5.0.0

Comparision Betweeen 5.0.0 and 4.5.3

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

168.15 KB

225.05 KB

Version 5.0.0 Details

Fast XML Parser version 5.0.0 introduces several key differences compared to its predecessor, version 4.5.3. Both versions share the core functionality of validating, parsing, and building XML without relying on C/C++ libraries, making them lightweight and efficient choices. A primary change lies in the dependencies. Version 5.0.0 updates the "strnum" dependency to "^1.0.5", whereas version 4.5.3 uses "^1.1.1". This dependency change suggests potential updates or refinements in string and number handling within the parser. Regarding developer tooling, version 5.0.0 upgrades "c8" to "^10.1.3" and "jasmine" to "^5.6.0", while version 4.5.3 uses older versions. Moreover, version 5.0.0 uses integrates Prettier "^3.5.1", a code formatter, which is absent in version 4.5.3, implying a focus on code style consistency. Both versions declare peer dependencies such as Typescript 5 and Node 20. A notable difference is the file count and unpacked size within the dist object. Version 5.0.0 has a smaller tarball with 45 files and an unpacked size of 172,183 bytes, while version 4.5.3 contains 69 files and a larger unpacked size of 230,455 bytes. This reduction in size suggests potential optimizations or removal of unnecessary files within the newer version. Developers should consider these changes when upgrading, particularly regarding the updated "strnum" dependency and the reduced package size. While both versions offer similar core functionalities, version 5.0.0 seems to emphasize improved tooling, code formatting, and potentially optimized performance.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.