Import-local version 3.0.0 introduces several key updates compared to version 2.0.0, making it a more robust and developer-friendly choice for managing local package dependencies within globally installed tools.
One of the most significant enhancements is the addition of find-up as a dependency. This allows import-local to reliably locate the locally installed package directory, even in complex project structures involving nested directories or monorepos. This improves the accuracy and the predictability of the library.
Furthermore, the dependencies pkg-dir and resolve-cwd were updated. pkg-dir updated from version ^3.0.0 to ^4.2.0 and resolve-cwd updated from version ^2.0.0 to ^3.0.0.
The development dependencies also saw some upgrades with del going from "^3.0.0" to "^4.1.1" and execa being bumped from "^0.11.0" to "^2.0.1". xo and ava were using a wildcard "*", so no conclusion can be taken regarding these packages.
These dependency updates likely bring performance improvements, improved API, or bug fixes.
These updates make version 3.0.0 a worthwhile upgrade for developers seeking more reliable and up-to-date functionality for prioritizing local package installations within global command-line tools.
The are not vulnerabilities for the version 3.0.0 of the package import-local