Version Details and Security Vulnerabilities

📦

jsdom

18.0.0

Comparision Betweeen 18.0.0 and 17.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

463

Unpacked Size

2.7 MB

2.64 MB

Version 18.0.0 Details

jsdom 18.0.0 represents a notable incremental upgrade over version 17.0.0, offering developers a more refined and standards-compliant environment for testing and emulating web browser behavior in Node.js. Key improvements lie in dependency updates, bolstering the library's robustness and security. For instance, ws (WebSocket client) saw an update from ^8.0.0 to ^8.2.3, resolving potential vulnerabilities and ensuring compatibility with newer WebSocket servers. acorn, the JavaScript parser, moved from ^8.4.1 to ^8.5.0, providing enhanced support for modern JavaScript syntax. whatwg-url advanced from ^9.0.0 to ^10.0.0, aligning the URL parsing implementation more closely with the WHATWG URL standard, and therefore improving correctness. webidl-conversions also upgraded from ^6.1.0 to ^7.0.0, reflecting advancements in the Web IDL specification. The domexception dependency advanced from ^2.0.1 to ^4.0.0, resolving potential bugs and improving error handling. Finally, the w3c-xmlserializer dependency was updated from ^2.0.0 to ^3.0.0.

Developers can leverage these changes for more accurate representation of browser behavior, particularly regarding modern web standards, contributing to more reliable testing of web applications in server-side environments. While many of the dependency upgrades address internal mechanics, they collectively contribute to a more stable and secure jsdom experience. Users should review new versions of dependencies for breaking changes that may impact their projects.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.