Grunt-preprocess saw a notable update with the release of version 5.1.0 compared to the previous stable version 5.0.1, primarily affecting its dependency management. One key change is the introduction of lodash as a direct dependency (^4.5.0 in 5.1.0), suggesting that the plugin now leverages lodash's utilities more extensively within its internal logic.
Another significant difference lies in the way grunt itself is handled. While both versions list grunt as a peer dependency, version 5.1.0 specifies a broader range ('>=0.4.0'), while 5.0.1 uses a more restrictive approximate version ('~0.4.0'). For developers, this means v5.1.0 offers greater compatibility with newer Grunt versions.
Also, the dependency versioning on grunt-contrib-clean and grunt-contrib-jshint went from ~0.6.0 and ~0.11.0 to ^1.0.0 for both in the newer version, which means it should be checked by the user when upgrading.
These updates indicate an effort to modernize the plugin, improve compatibility and potentially enhance its functionality by incorporating a utility library which can be a net positive for developers looking for a robust solution. If you're already utilizing lodash in your project, upgrading to 5.1.0 eliminates the need to manage it independently, streamlining your dependency tree and improving your Grunt build process.
The are not vulnerabilities for the version 5.1.0 of the package grunt-preprocess