Version 4.5.0 of npm-package-json-lint introduces several notable changes compared to version 4.4.0, primarily impacting its dependencies. The critical update lies in the semver dependency, which has been upgraded from version 6.3.0 to ^7.0.0. This is significant as Semver 7 introduces breaking changes, so projects relying on specific Semver 6 behaviors will need to evaluate the impact. In contrast, the upgrade of meow (from 5.0.0 to 6.0.0) and jsonc-parser(^2.2.0) which is new in the 4.5.0 can introduce small breaking changes but shouldn't create big problems for the users.
Developers using npm-package-json-lint should be aware of these dependency updates, especially due to the semver major update. This configurable linter is designed to enforce quality and consistency in package.json files, aiding in project maintainability and collaboration. By identifying and reporting on deviations from established rules, the tool helps ensure that your package.json files adhere to best practices. The package's core functionality remains consistent between the two versions, focusing on linting via a defined set of rules enforced on package.json file contents. It also contains configuration options to adapt to the project. It is always good to check the library output after any major update to ensure that nothing is broken. A slightly increased 'unpackedSize' (139501 vs 137471) and a change on 'fileCount'(132 vs 131) suggest minor updates in the source code and/or assets of the package.
The are not vulnerabilities for the version 4.5.0 of the package npm-package-json-lint