Property-expr is a lightweight utility designed for safely accessing and manipulating deeply nested properties within JavaScript objects. Both versions 1.5.0 and 1.5.1 share the same core functionality, offering developers a reliable method for retrieving and setting values in complex object structures, preventing common errors that arise from undefined intermediate properties. Key features include a concise syntax for specifying property paths using dot notation and bracket notation, as well as robust error handling to avoid unexpected crashes.
While the core functionality remains consistent, version 1.5.1, released on August 9, 2018, represents a minor update over version 1.5.0, which was released on July 20, 2018. The data suggests that the changes between the two versions are subtle, likely involving bug fixes, performance improvements, or minor code refinements. The identical fileCount and unpackedSize further indicate that the code base size hasn't significantly changed.Developers already using 1.5.0 might consider upgrading to 1.5.1 for potential stability enhancements. For new users, choosing version 1.5.1 is recommended to benefit from the latest improvements baked into this tiny but mighty utility. The MIT license ensures flexible usage across various projects. Its small footprint makes it ideal for scenarios where minimizing dependencies and prioritizing performance are crucial.
All the vulnerabilities related to the version 1.5.1 of the package
Prototype Pollution in property-expr
The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.