Read-package-json version 2.1.2 introduces several key updates compared to the previous stable version, 2.1.1. The most notable change is the replacement of the graceful-fs and json-parse-better-errors dependencies with json-parse-even-better-errors. This signals an upgrade in how the package handles JSON parsing and error reporting, potentially offering developers more informative and user-friendly error messages when dealing with malformed package.json files. While both versions share core dependencies like glob, normalize-package-data, and npm-normalize-package-bin, this swap under the hood suggests a focus on improved error handling which is beneficial during development or any automated process depending on the validation of package.json files. Developers relying on the specific behavior of graceful-fs should be aware of its removal. The update also sees a slight increase in the unpacked size from 19171 to 19308 bytes which can be interpreted as a sign of increased complexity in the most recent version. Version 2.1.2 was released on August 20, 2020, a significant time jump from version 2.1.1 released in December 2019, so it incorporates any other indirect dependency upgrade that might have occured during this period. Both versions maintain the same development dependencies for testing and code quality, indicating a consistent approach to development practices. This version is licensed under ISC.
The are not vulnerabilities for the version 2.1.2 of the package read-package-json