React-dom versions 16.8.4 and 16.8.3 represent incremental updates to the widely used React package for DOM manipulation. Both versions share a common foundation, including the same peer dependency on react version ^16.0.0, the MIT license, and the same repository on GitHub, reflecting their collaborative nature. They share the same dependencies prop-types, loose-envify and object-assign.
The primary difference lies in the updated dependency on scheduler. Version 16.8.4 utilizes scheduler version ^0.13.4, while version 16.8.3 relies on scheduler version ^0.13.3. This update likely incorporates bug fixes or performance improvements within the scheduler, which is responsible for managing the execution of React components. Further, the new version has its release date on March 5, 2019, a couple of weeks after the release of the previous version, February 21, 2019.
Developers considering upgrading should evaluate the changes within the scheduler package to assess their impact on application performance and stability. The size of the package increased a little, so this is something to be considered. Given the relatively small version bump, moving from 16.8.3 to 16.8.4 is likely to be a safe incremental update leading to a smoother user experience. Both versions ensure compatibility with React 16 and provide a robust foundation for building modern web applications leveraging the DOM.
The are not vulnerabilities for the version 16.8.4 of the package react-dom