The npm package "parcel" saw a significant shift between versions 0.0.1 and 0.1.0. Version 0.0.1, released in May 2013, was designed as a package management tool leveraging a file server and path conventions. It included dependencies on popular libraries like debug, aws-sdk, commander, and path-extra, indicating its functionality likely revolved around debugging, cloud interaction, command-line interface creation, and path manipulation. The presence of development dependencies like chai and mocha suggests the package was thoroughly tested using behavior-driven development principles. Its repository resided on GitHub under *sifteo/parcel*, signaling a potential association with the game development platform. This initial version aimed to simplify package management, potentially through conventions and file server interactions, appealing to developers seeking streamlined workflows.
However, version 0.1.0 represents a stark contrast. Released nearly five years later in April 2018, it carries a clear warning: "DO NOT INSTALL." This immediately indicates a potentially broken or incomplete state. While the package retains the name "parcel," the author is listed as "sheetjs," which differs from the original "Jared Hanson," suggesting a change in ownership or team. The description is minimal compared to the first version, and the lack of dependencies and development dependencies points to either a premature release or a complete reimagining. Developers should avoid version 0.1.0 and investigate the "sheetjs" association further to understand the context of this particular iteration. The critical note emphasizes using extreme caution with this version.
The are not vulnerabilities for the version 0.1.0 of the package parcel