Version Details and Security Vulnerabilities

📦

lint-staged

10.0.2

Comparision Betweeen 10.0.2 and 10.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

60.86 KB

59.55 KB

Version 10.0.2 Details

Lint-staged is a popular npm package that helps developers automatically format and lint files that are staged in Git, ensuring code quality and consistency before committing. Comparing versions 10.0.1 and 10.0.2, several subtle but important differences can be identified. Both versions share core dependencies like chalk, debug, execa, listr, dedent, commander, micromatch, cosmiconfig, log-symbols, normalize-path, stringify-object, and please-upgrade-node which are essential for the package's core functionality such as displaying colorized output, debugging, executing commands, creating interactive lists, and handling path normalization.

The primary change lies in the removal of jsonlint from the devDependencies in version 10.0.2. While seemingly minor, this might indicate a shift in the project's internal tooling or a replacement of jsonlint with another JSON validation mechanism. This change could impact developers who relied on jsonlint indirectly through lint-staged configuration.

Version 10.0.2 was released shortly after 10.0.1; this near immediate release points to a hot fix or minor update addressing an issue present in the previous version. While the data doesn't specify the exact nature of the fix, the change relating to jsonlint hints at a potential improvement in configuration handling or reduced dependency footprint of the package. Besides this the unpackedSize also had a difference from 60978 to 62325, so there are some minor differences in source code. Upgrading to version 10.0.2 is generally recommended, as it likely includes bug fixes and potential optimizations.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.