Version Details and Security Vulnerabilities

📦

node-fetch

3.3.0

Comparision Betweeen 3.3.0 and 3.2.10

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

104.59 KB

104.18 KB

Version 3.3.0 Details

Node-fetch version 3.3.0 introduces subtle but important changes compared to its predecessor, version 3.2.10 that developers should be aware of. Both versions maintain the core functionality of providing a lightweight Fetch API for Node.js, simplifying making HTTP requests. The dependencies remain consistent: they include "data-uri-to-buffer," "fetch-blob," and "formdata-polyfill," suggesting a continued focus on handling data URIs, binary data, and form data effectively. The developer dependencies, crucial for testing and development workflows, also mirrored between the two versions, offering stability in the development process.

The key difference lies in the "dist" section, specifically the "unpackedSize". Version 3.3.0 shows a slight increase in size, coming in at 107098 bytes compared to 3.2.10's 106676 bytes, even with with the same number of fileCount of 17. This small increase might indicate minor code refinements or dependency updates within the package that do not require a change in dependencies versions. Additionally, the release date differentiates the versions with version 3.3.0 released on November 10, 2022. This is three months after the older version. Developers considering upgrading should test their implementations to ensure compatibility, although the minor nature of the version bump suggests a low risk of breaking changes. Keep in mind the updated version may have fixed security issues that were present in the older version. Always check the release notes for the list of confirmed changes.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.