Mochawesome 5.0.0 represents a notable upgrade from version 4.1.0, offering developers enhancements in both its core dependencies and development tooling. A key difference lies in its updated dependencies, with significant bumps in packages like chalk (v3.0.0 from v2.4.1), strip-ansi (v6.0.0 from v5.0.0), and uuid (v7.0.0 from v3.3.2). These updates likely bring performance improvements, security patches, and access to newer features within those libraries, potentially impacting the styling and unique identifier generation within Mochawesome reports. Crucially, mochawesome-report-generator advances to version 4.1.0 from 4.0.0 meaning noticeable improvement to the report generation itself.
The developer experience is also enhanced by more recent dev dependencies. ESLint jumps to version 6.5.1, while cross-env updates to 7.0.0 and NYC (coverage) to 15.0.0, contributing to a more robust and modern development environment. Notably, the peer dependency for Mocha is now ">=7" meaning older unsupported versions may start failing. Sinon also sees a major version bump (v9.0.0). While should and proxyquire remain the same, the overall suite of development tools is more current, aiding in testing, linting, and code quality. These updates suggest a focus on keeping Mochawesome compatible with the latest JavaScript ecosystem standards. The increase in unpackedSize (40603 from 40261) suggests added features or increased code complexity. Developers should assess these dependency updates for compatibility with their existing Mocha setup and consider the potentially improved reporting capabilities offered by the newer version.
All the vulnerabilities related to the version 5.0.0 of the package
Inefficient Regular Expression Complexity in validator.js
validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression Complexity