Version Details and Security Vulnerabilities

📦

read-pkg-up

4.0.0

Comparision Betweeen 4.0.0 and 3.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

4.09 KB

N/A

Version 4.0.0 Details

Read-pkg-up is a valuable npm package designed to locate and read the nearest package.json file in a directory tree. Comparing versions 4.0.0 and 3.0.0 reveals key updates for developers. Version 4.0.0, released on June 18, 2018, updates the "find-up" dependency from "^2.0.0" to "^3.0.0". This signifies a reliance on a newer version of the find-up package, which is responsible for traversing the directory structure. Such an update often brings performance improvements, bug fixes, and potentially new features from the dependency itself. Developers should therefore consider this when deciding whether to update to the newer version.

Both versions maintain the same core functionality, reading the closest package.json file, using the read-pkg dependency for parsing of the package.json content, and keeping the same devDependencies (ava and xo) and author information. The MIT license remains consistent across both versions, along with the project's repository on GitHub. For developers, updating might be beneficial to leverage the updated find-up capabilities. Check the changelogs of both read-pkg-up and find-up for detailed information on specific changes, bug fixes, and improvements within the updated "find-up" package to effectively assess the impact on existing projects. Finally, the tarball link on npm provides easy access to the package archives for both versions.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.