Jest-fetch-mock is a popular library for mocking the fetch API within Jest unit tests, simplifying the process of testing code that relies on making HTTP requests. Comparing version 1.4.3 with its predecessor, 1.4.2, reveals some key differences that might interest developers. While both versions share the same core dependencies, MIT license, repository, and author information, the notable changes lie in the release date and unpacked size. Version 1.4.3 was released on March 20, 2018, whereas version 1.4.2 was released on February 21, 2018, indicating roughly a month of development and potential bug fixes or feature enhancements. A larger unpacked size for version 1.4.3 (18703 bytes compared to 15272 bytes in 1.4.2) suggests additions or modifications to the codebase, which could include new functionalities, improved performance, or more comprehensive test coverage. Developers considering upgrading should investigate the changes between these versions. The increased size could impact bundle size if jest-fetch-mock is included in client-side code, although this is generally not the case as it is primarily a testing dependency. Potential improvements to the API or bug fixes would be beneficial, thus the upgrade is advised after assessing the impact.
All the vulnerabilities related to the version 1.4.3 of the package
node-fetch forwards secure headers to untrusted sites
node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site.
