In-publish is a lightweight npm package designed to help developers determine if their script is being executed as part of the npm publish process. This is incredibly useful for tasks like running pre-publication checks, modifying files specifically for the published package, or preventing certain actions from happening during local development. Version 2.0.1, released in March 2020, builds upon the foundation of version 2.0.0, which came out much earlier in July 2015.
The primary difference between the two versions lies in their metadata and potentially subtle internal improvements. While both versions share the same core functionality, description, license (ISC), repository information, and author details (Rebecca Turner), version 2.0.1 includes additional information in its dist object, specifying fileCount as 9 and unpackedSize as 4008. This could reflect optimizations in the package structure of 2.0.1 compared to 2.0.0 where those pieces of information are missing. Developers upgrading from 2.0.0 should not expect breaking changes, as the core functionality remains the same. However, the newer version might offer minor improvements in terms of package size or installation speed due to the potential optimizations indicated by the fileCount and unpackedSize properties. Moreover, upgrading ensures you are on a more recently maintained version, potentially benefitting from bug fixes or minor enhancements. If you use this library, always use the newest version.
The are not vulnerabilities for the version 2.0.1 of the package in-publish