Version Details and Security Vulnerabilities

📦

ora

4.0.2

Comparision Betweeen 4.0.2 and 4.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

20.28 KB

20.19 KB

Version 4.0.2 Details

Ora is a popular npm package providing an elegant terminal spinner for enhancing the user experience in command-line applications. Comparing versions 4.0.1 and 4.0.2 reveals subtle yet potentially impactful changes. Both versions share identical dependencies, including chalk for stylized output, wcwidth for accurate character width calculation, cli-cursor for cursor manipulation, strip-ansi for removing ANSI escape codes, log-symbols for cross-platform symbols, cli-spinners for a variety of spinners, and is-interactive for checking terminal interactivity. Development dependencies also remain consistent, leveraging xo for linting, ava for testing, tsd for TypeScript definition testing, get-stream for stream consumption, and @types/node for Node.js typings.

The key differences lie primarily in the realm of package metadata. Version 4.0.2, released on September 29, 2019, exhibits a slightly larger unpacked size of 20765 bytes compared to version 4.0.1's 20671 bytes which was released on September 23, 2019. While seemingly minor, this increase suggests potential internal improvements or minor code adjustments. For developers using Ora, this newer version ensures they benefit from the latest refinements and bug fixes, however minimal. Both versions maintain the same MIT license, repository URL, and author information. Developers integrating Ora can expect a visually appealing and customizable loading indicator for their command-line tools, offering a seamless and informative user experience without significant functional changes between these specific versions. Despite the minimal changes, keeping up to date with the latest version ensures access to any minor bug fixes.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.