Version Details and Security Vulnerabilities

📦

rollup-plugin-node-globals

1.3.0

Comparision Betweeen 1.3.0 and 1.2.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

28.91 KB

26.88 KB

Version 1.3.0 Details

Rollup Plugin Node Globals simplifies the process of integrating Node.js global variables into browser-based JavaScript bundles created with Rollup. This plugin mirrors the functionality of Browserify, ensuring consistent behavior when porting code designed for Node.js environments to the browser.

Version 1.3.0 builds upon version 1.2.1 with key updates focused on compatibility and developer experience. One notable change is the upgraded rollup dependency, moving from version 0.56.3 to version 0.64.1. This ensures better compatibility with the newer Rollup ecosystem and unlocks potential benefits from Rollup's core enhancements and optimizations.

A subtle change, but worth noting, is the replacement of babel-preset-es2015-rollup with babel-preset-env within the devDependencies. This reflects the evolving landscape of Babel presets, with babel-preset-env offering a more flexible and modern approach to target specific JavaScript environments. It is also worth noting the addition of Jest as a testing framework.

Another interesting difference lies in the dist section, highlighting a small increase in the unpacked size of the package, from 27522 bytes in v1.2.1 to 29599 bytes in v1.3.0. This increase, along with the changes in dependencies, might indicate that new features or testing utilities where added or existing functionality has been refined.

Both versions maintain the same core dependencies, including acorn, buffer-es6, estree-walker, magic-string, process-es6, and rollup-pluginutils, demonstrating a stable base for handling the transformation and injection of Node.js globals. The MIT License continues to secure the project under permissive terms of use.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.