Version Details and Security Vulnerabilities

Rollup Plugin Esbuild, a tool designed to leverage the speed of esbuild within the Rollup ecosystem, has seen a notable update from version 2.2.0 to 2.3.0. Both versions aim to provide developers with a significantly faster alternative to Babel or TSC for transpiling TypeScript and modern JavaScript to ES6, capitalizing on Rollup's robust plugin infrastructure.

The key difference between the two versions lies in how esbuild is handled. Version 2.2.0 declares esbuild as a direct dependency of the plugin, specifying a version constraint of ^0.5.9. The newer version 2.3.0, on the other hand, shifts esbuild to a peer dependency, with a constraint of ^0.6.0. This implies that users of version 2.3.0 must explicitly install esbuild as a separate dependency in their projects, providing greater control over the specific esbuild version used. This change reduces the plugin bundle size while allowing users to manage their esbuild version independently, potentially aligning it with other tools in their workflow that rely on esbuild.

Aside from the dependency management change for esbuild, both versions share consistent development dependencies, ensuring a stable testing and development environment. Developers considering adopting or upgrading should be aware of the peer dependency change, ensuring that esbuild is correctly installed and configured in their projects to avoid runtime errors. The core functionality remains the same: a fast and efficient way to integrate esbuild's compilation speed into Rollup-based workflows.