Version Details and Security Vulnerabilities

📦

rollup-plugin-istanbul

5.0.0

Comparision Betweeen 5.0.0 and 4.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

13.71 KB

12.33 KB

Version 5.0.0 Details

Rollup-plugin-istanbul has released version 5.0.0, marking an update to the seamless integration between Rollup and Istanbul for code coverage instrumentation. Comparing it to the previous stable version, 4.0.0, several updates are important for developers.

First, dependency updates are in place. Version 5.0.0 upgrades @rollup/pluginutils to at least version 5.0.5 (previously 5.0.2) and istanbul-lib-instrument to at least version 6.0.1 (previously 5.2.1). These updates likely incorporate bug fixes, performance improvements, and new features from their respective maintainers, potentially enhancing the plugin's stability and efficiency.

The devDependencies also show significant upgrades. For example, eslint has jumped from version 8.26.0 to 8.52.0, eslint-config-prettier from 8.5.0 to 9.0.0, prettier from 2.7.1 to 3.0.3 and importantly rollup used for plugin building goes from 3.2.5 to 4.1.4. These updates indicate improvements in the development environment, code linting, formatting, and build process. The peer dependency for rollup now explicitly supports Rollup v4 (^1.20.0||^2.0.0||^3.0.0||^4.0.0), ensuring compatibility with the latest Rollup version, while the older version only went up to Rollup v3.

Finally, the distribution size has slightly increased, with fileCount going from 7 to 8 and unpackedSize expanding from 12621 bytes to 14034 bytes, suggesting added features or code adjustments. The release date also shows a significant gap, with v5.0.0 released almost a year after v4.0.0, indicating substantial development effort and stabilization. These combined updates make version 5.0.0 a compelling upgrade for developers using Rollup for building JavaScript libraries and applications, especially those seeking enhanced code coverage analysis with Istanbul.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.