Version Details and Security Vulnerabilities

📦

read-pkg-up

8.0.0

Comparision Betweeen 8.0.0 and 7.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

6.45 KB

6.57 KB

Version 8.0.0 Details

Read-pkg-up has been updated to version 8.0.0, offering developers an enhanced way to locate and read the nearest package.json file in a directory hierarchy. Comparing it to the previous stable version, 7.0.1, several dependency updates stand out. Find-up moves from ^4.1.0 to ^5.0.0, read-pkg jumps from ^5.2.0 to ^6.0.0, and type-fest sees an upgrade from ^0.8.1 to ^1.0.1. These upgrades likely bring performance improvements, bug fixes, and new features from the underlying libraries.

For developers, these dependency updates are significant because they may need to adjust their code to accommodate any breaking changes introduced by the updated dependencies. However, the updates likely contribute to a more robust and reliable experience. The devDependencies also got some love with ava moving from ^2.4.0 to ^3.15.0, tsd from ^0.9.0 to ^0.14.0 and xo from ^0.25.3 to ^0.38.2 meaning better testing/TS definition and code quality.

The unpacked size of version 8.0.0 has slightly decreased to 6605 bytes compared to 7.0.1's 6727 bytes, potentially indicating code optimization. The release date difference highlights a fairly substantial update cycle, with almost 18 months separating the two versions. When adopting 8.0.0, developers should test thoroughly, especially if relying on specific behaviors of the underlying find-up, read-pkg, or type-fest libraries.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.