NYC (Istanbul command-line interface) has seen a significant update between versions 15.1.0 and 17.0.0. The upgrade brings improvements and changes primarily focused on internal dependencies and development tooling. While the core functionality of NYC, providing code coverage reports for JavaScript projects, remains consistent, developers should be aware of the updated dependency landscape.
Version 17.0.0 boasts newer versions of several internal dependencies. Notably, istanbul-lib-instrument jumps from version 4.0.0 to 6.0.2. This could incorporate performance enhancements or bug fixes within the instrumentation process itself, a crucial part of code coverage analysis. Other dependencies like @istanbuljs/schema, istanbul-lib-report, istanbul-lib-coverage, and istanbul-lib-source-maps have also had updates. These modifications might potentially affect the accuracy or efficiency of coverage reporting.
On the development side, version 17.0.0 upgrades tap from ^14.10.5 to ^18.7.2 and standard-version from ^8.0.0 to ^9.0.0. The removal of coveralls from devDependencies may indicate a shift in the preferred method for uploading coverage reports. The size and file count in the dist object also change drastically, going from 21 files and 104971 unpacked size to 20 files and 56905 unpacked size. Finally, version 17.0.0 was released on June 9th, 2024, a significant time jump from the June 1st, 2020 release of version 15.1.0
The are not vulnerabilities for the version 17.0.0 of the package nyc