Version Details and Security Vulnerabilities

📦

npm

9.9.0

Comparision Betweeen 9.9.0 and 9.8.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

2285

2264

Unpacked Size

10.7 MB

10.59 MB

Version 9.9.0 Details

npm version 9.9.0 introduces several dependency updates and a few key changes for developers. The most notable updates are in the dependencies section, including sigstore (bumped from 1.7.0 to 1.9.0), @npmcli/config (upgraded from 6.2.1 to 6.4.0), libnpmdiff (from 5.0.19 to 5.0.20), libnpmexec (from 6.0.3 to 6.0.4), libnpmfund (from 4.0.19 to 4.2.1), and @npmcli/arborist (6.3.0 to 6.5.0). These updates likely include bug fixes, performance improvements, and potentially new features within those respective libraries. Another important update is npm-install-checks (6.1.1 to 6.2.0) suggesting improvements to npm's installation process, potentially including enhanced error handling or better compatibility checks.

Furthermore, there appears to be a new dependency in 9.9.0, spdx-expression-parse":"^3.0.1", which might indicate increased focus on support for SPDX license expressions when dealing with packages. The devDependencies see fewer changes, but @npmcli/template-oss moves from version 4.18.0 to 4.19.0, and ajv is introduced at version 8.12.0 with the same dependencies (ajv-formats and ajv-formats-draft2019). The number of files included in the package increased from 2264 to 2285 and the unpacked size grew from 11100170 to 11223223, which isn't necessarily a negative as it can show the inclusion of new features and better dependency management. Developers should review these updated dependencies to ensure compatibility with their projects and take advantage of any new features or improvements. The bump also indicates a consistent attempt to keep the package secure and up-to-date with the most recent dependency versions.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.