Version Details and Security Vulnerabilities

📦

postcss

8.4.37

Comparision Betweeen 8.4.37 and 8.4.36

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

193.19 KB

193.14 KB

Version 8.4.37 Details

PostCSS 8.4.37 represents a minor update to the popular CSS transformation tool, following closely on the heels of version 8.4.36. Both versions share the core functionality of transforming styles with JavaScript plugins and are licensed under the MIT license, ensuring broad usability. They are both authored by Andrey Sitnik and maintain the same funding avenues through Open Collective, Tidelift, and GitHub Sponsors. The installation should be identical, via npm install postcss, or yarn add postcss.

The primary difference lies in the updated dependency of source-map-js. Version 8.4.37 upgrades this dependency from 1.1.0 to ^1.2.0, introducing potential bug fixes, performance improvements, or new features related to source map handling. Developers relying on source map functionality should carefully review the changes in source-map-js version 1.2.0 to ensure compatibility and take advantage of any enhancements. This dependency update also accounts for a slight increase in the unpacked size of the package, from 197780 bytes in 8.4.36 to 197826 bytes in 8.4.37. The release dates are also different, with the latest version released on March 19, 2024, and the older version released on March 17, 2024, this can give you an idea of the frequency of releases. Both versions appear to ship with the same file count, suggesting no major structural changes to the package itself. This incremental upgrade ensures continued stability and improved source map handling, making it a recommended update for those already using PostCSS.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.