Version Details and Security Vulnerabilities

📦

normalize-package-data

2.4.2

Comparision Betweeen 2.4.2 and 2.4.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

26.03 KB

Version 2.4.2 Details

Normalize-package-data is a utility designed to sanitize and standardize the information found within package.json files, ensuring consistency and reliability across different projects and environments. Comparing version 2.4.2 with its immediate predecessor, 2.4.1, reveals a subtle but potentially impactful change within its dependencies. Specifically, the is-builtin-module dependency has been updated from version 3.0.0 in 2.4.1 to ^1.0.0 in 2.4.2. This suggests a potential fix or adjustment related to how the package identifies built-in Node.js modules. While seemingly minor, this shift could resolve compatibility issues or introduce performance improvements. The other dependencies, including semver, hosted-git-info, and validate-npm-package-license, remain unchanged, indicating that the core logic related to version comparison, git repository handling, and license validation remain consistent between these versions. Developers using normalize-package-data should evaluate whether the change in is-builtin-module impacts their specific use cases, particularly if they rely on accurate identification of built-in modules. Both versions maintain the same development dependencies (tap, async, underscore) further highlighting the focus on testing and asynchronous operations. This package is licensed under BSD-2-Clause license, encouraging broad usage and modification.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.