Version Details and Security Vulnerabilities

📦

lint-staged

13.0.1

Comparision Betweeen 13.0.1 and 13.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

106.31 KB

104.03 KB

Version 13.0.1 Details

Lint-staged version 13.0.1 is a minor patch release following closely on the heels of version 13.0.0, both designed to lint files staged in Git. The core functionality remains the same: leveraging tools to automatically format and correct code before commits, ensuring code quality and consistency.

A key difference lies in the dependency updates. Version 13.0.1 upgrades the pidtree dependency from 0.5.0 to 0.6.0 and colorette from 2.0.16 to 2.0.17. While these might seem minor, they often include bug fixes, performance improvements, or security patches that contribute to the overall stability and reliability of lint-staged. Developers should be aware that pidtree deals with process management, and any changes there influence how lint-staged interacts with running linters and formatters.

Furthermore, some of the development dependencies were updated on the newer version: jest from 28.1.0 to 28.1.1 and eslint from 8.16.0 to 8.17.0. Although these don't directly impact the end user, they potentially introduce changes in the testing and linting processes that may be relevant if the developer is also contributing to or extending lint-staged.

Choosing between versions likely depends on the specific needs. If stability and the latest patches are priorities, version 13.0.1 is recommended. For projects already using 13.0.0, upgrading should be straightforward, provided the minor dependency changes don't introduce any compatibility issues. As always, developers should review the changelogs of the updated dependencies for comprehensive details. The unpacked size of the package also increased slightly, from 106522 to 108864, this probably is related to the new dependencies versions.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.