Version Details and Security Vulnerabilities

📦

less-loader

8.0.0

Comparision Betweeen 8.0.0 and 7.3.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

43.81 KB

41.89 KB

Version 8.0.0 Details

Less-loader has a new major version with the release of version 8.0.0, building upon the stable foundation of version 7.3.0. Both versions serve the same core purpose: compiling Less stylesheets into CSS within a webpack build process, enabling developers to leverage the power of Less syntax and features in their web projects.

A key difference lies in the updated dependencies. Version 8.0.0 removes the direct dependencies on loader-utils and schema-utils, streamlining the dependency tree for potentially faster installation and reduced bundle size. While klona persists as a dependency in both, the removal of the other two suggests internal refactoring or a different approach to options validation and utility functions, things that usually can lead to a more robust and maintainable codebase.

Both versions maintain compatibility with Less versions 3.5.0 and 4.0.0 and webpack 5, as indicated in peerDependencies. However, version 7.3.0 also declares explicit support for webpack 4, a compatibility removed in version 8.0.0. Meaning that if you still have webpack 4 as the bundler of your choice, you need to stick to version 7.3.0. Developers upgrading to version 8.0.0 should ensure their project uses webpack 5 to avoid compatibility issues. The devDependencies are nearly identical, indicating a consistent development environment and testing strategy between the two versions. The bump on the less version in version 8.0.0 from 4.1.0 to 4.1.1 is most likely a security patch.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.