Version Details and Security Vulnerabilities

📦

rollup-plugin-istanbul

3.0.0

Comparision Betweeen 3.0.0 and 2.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

11.61 KB

10.34 KB

Version 3.0.0 Details

Rollup Plugin Istanbul streamlines code coverage reporting within Rollup workflows. Version 3.0.0 introduces several key improvements over its predecessor, version 2.0.1, making it a more modern and efficient choice for developers. A notable change is the updated peer dependency on Rollup, now supporting versions ^1.20.0 or ^2.0.0, aligning with more recent Rollup releases. The dependency management system has also been modernized, switching from the older rollup-pluginutils to the official @rollup/pluginutils package (version ^4.1.0). This signifies an alignment with Rollup's recommended plugin development practices. Internally, the instrumentation library has been upgraded, using istanbul-lib-instrument ^4.0.3 compared to the older ^1.9.1, which likely includes bug fixes, performance improvements, and support for Javascript code coverage features.

Furthermore, the package's development dependencies have been updated across the board, indicating a shift to current tooling standards. Babel, previously used for transpilation in the older version, is no longer listed as a dev dependency, which may hint at a change in the project's build process, potentially simplifying it. The move to more recent versions of ESLint and Mocha suggests a commitment to code quality and modern testing practices. Developers should consider version 3.0.0 for better compatibility with newer Rollup versions, improved performance due to updated dependencies, and a focus on maintainability with up-to-date development tools.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.