Version Details and Security Vulnerabilities

📦

npm

9.6.4

Comparision Betweeen 9.6.4 and 9.6.3

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

2170

Unpacked Size

9.86 MB

Version 9.6.4 Details

npm version 9.6.4 is a minor release building upon the previous stable version, 9.6.3, both serving as JavaScript package managers. While the core functionality remains consistent, several dependency updates contribute to subtle improvements and potential bug fixes. Key changes reside primarily in underlying libraries. Notably, glob advances from version 9.3.1 to 9.3.2, suggesting refinements in file system path matching. Similarly, ssri upgrades from 10.0.1 to 10.0.2, potentially enhancing security or integrity checks related to Subresource Integrity.

Furthermore, there are version bumps in libnpmdiff (5.0.14 to 5.0.15), libnpmexec (5.0.14 to 5.0.15), and libnpmfund (4.0.14 to 4.0.15), hinting at improvements in dependency diffing, command execution, and fund management capabilities, respectively. @npmcli/arborist experiences a version update from 6.2.6 to 6.2.7, potentially refining dependency resolution and tree management. In terms of size, the zipped tarball is similar between both, but the extracted size has decreased suggesting an optimization in size related to the included files and their compression.

For developers, these incremental updates translate to a more robust and secure package management experience. While not groundbreaking, these changes address underlying issues and enhance the stability of npm. Utilizing the latest version ensures access to the most recent improvements and bug fixes within these core dependencies. Developers should evaluate if these updates affect any particular functionality or dependency within their current project.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.