Read-pkg-up is a utility for Node.js developers designed to locate and read the nearest package.json file in the directory tree. Version 2.0.0 brings some improvements and dependency updates compared to the older 1.0.1. A key difference lies in the updated dependencies: 2.0.0 uses "find-up": "^2.0.0" and "read-pkg": "^2.0.0", while 1.0.1 relies on older versions "find-up": "^1.0.0" and "read-pkg": "^1.0.0". This update suggests that version 2.0.0 benefits from the newer features, bug fixes, and potential performance improvements introduced in newer versions of its dependencies. For developers, this means improved reliability thanks to the find-up updates in locating the package file and the code parsing by read-pkg. If you're already using find-up and read-pkg in your project, upgrading to read-pkg-up 2.0.0 will ensure you are using the most modern versions. Both versions are licensed under the MIT license. Version 2.0.0 was released later than 1.0.1, this means that 2.0.0 has more time invested in it and will probably include more bugfixes. It is recommended that you use version 2.0.0 to take advantage of optimizations by its dependencies.
The are not vulnerabilities for the version 2.0.0 of the package read-pkg-up