Version Details and Security Vulnerabilities

PostCSS Nested has a new major version, 7.0.0, offering developers an updated solution for unwrapping nested CSS rules, mirroring the familiar Sass nesting syntax. Comparing it to the previous stable version, 6.2.0, the primary difference lies in its dependency on postcss-selector-parser. Version 7.0.0 now requires postcss-selector-parser version ^7.0.0, a jump from ^6.1.1 in version 6.2.0. This dependency update likely brings improvements in selector parsing and could potentially address bugs or enhance performance.

For developers considering an upgrade, this change is important. While the core functionality of unwrapping nested rules remains the same, ensure compatibility with your existing project setup and specifically any plugins or tools reliant on the postcss-selector-parser. Both versions share the same peer dependency of postcss: ^8.2.14, maintaining compatibility with a wide range of PostCSS versions.

Besides the dependency update, both versions maintain identical characteristics, including the same MIT license, author, repository location, funding information, and similar distribution structures. The unpacked size has only slightly increased from 13962 to 14663, indicating a relatively minor code addition or modification. The major version update suggests the potential introduction of breaking changes, even if they have not been explicitly declared. Thus, it's advisable to thoroughly test your CSS after upgrading to 7.0.0. The release date of October 29, 2024, makes 7.0.0 the latest iteration of the plugin, potentially including recent refinements and fixes.