Version Details and Security Vulnerabilities

📦

react-scripts

3.3.1

Comparision Betweeen 3.3.1 and 3.3.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

117.71 KB

116.22 KB

Version 3.3.1 Details

React Scripts version 3.3.1 represents a subtle but important update over version 3.3.0, primarily focusing on dependency improvements and potential bug fixes. Developers upgrading from 3.3.0 will find that the core functionality remains consistent, ensuring a smooth transition. Key differences lie in the updated versions of several dependencies, potentially addressing security vulnerabilities or performance enhancements included in those packages.

For instance, webpack jumps from 4.41.2 to 4.41.5, potentially incorporating vital stability improvements and bug resolutions. Babel core goes from 7.7.4 to 7.8.4, that means better Javascript transpilation in the latest versions. The new version has upgrades on css-loader from 3.2.0 to 3.4.2, providing extended posibilities to the user in terms of style customization. HTML webpack plugin goes from beta 5 to beta 11, which is a massive upgrade with improved stability and bug fixes.

Furthermore, @typescript-eslint/parser and @typescript-eslint/eslint-plugin move from version 2.8.0 to 2.10.0, suggesting improvements in TypeScript linting and parsing capabilities. React-dev-utils go from 10.0.0 to 10.1.0 improving and modernizing this tooling. Babel-preset-react-app moves to a new version introducing potential performance and stability enhancements.

The resolve dependency also sees an upgrade from 1.12.2 to 1.15.0, indicative of improvements in module resolution. The release date difference of nearly two months suggests that 3.3.1 incorporates accumulated updates and fixes addressing real-world usage scenarios, making it a worthwhile upgrade for developers seeking the most stable and refined experience.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.