Version Details and Security Vulnerabilities

📦

jsdom

24.1.0

Comparision Betweeen 24.1.0 and 24.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

481

Unpacked Size

2.97 MB

Version 24.1.0 Details

Jsdom version 24.1.0 introduces several updates compared to version 24.0.0, making it a worthwhile upgrade for developers relying on this JavaScript implementation of web standards. Most notably, the ws (WebSocket) dependency has been updated from ^8.16.0 to ^8.17.0, potentially incorporating important bug fixes and security patches related to WebSocket handling. Additionally, the rrweb-cssom dependency sees an upgrade from 0.6.0 to 0.7.0, suggesting enhancements or fixes in CSS Object Model handling. http-proxy-agent moves from ^7.0.0 to ^7.0.2 and https-proxy-agent from ^7.0.2 to ^7.0.4, implying improvements in proxy support and security.

On the tooling front, eslint is bumped from ^8.56.0 to ^8.57.0, and webidl2js jumps from ^17.1.0 to ^18.0.0. Also minimatch increments slightly from ^9.0.3 to ^9.0.4. While these are development dependencies, they reflect a commitment to code quality and adherence to web standards specifications within the jsdom project. The tough-cookie dependency also gets a small bump from version 4.1.3 to 4.1.4.

These incremental updates across various dependencies, particularly in areas like WebSocket handling, CSSOM, and proxy support, contribute to a more robust and secure environment for simulating web browser behavior within Node.js. Developers using jsdom should consider upgrading to leverage these improvements and benefit from the latest patches and features in underlying libraries. The unpacked size saw a slight increase probably due to the included updates.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.