Version Details and Security Vulnerabilities

📦

rollup-plugin-ts

1.2.0

Comparision Betweeen 1.2.0 and 0.2.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

537

Unpacked Size

2.16 MB

840.03 KB

Version 1.2.0 Details

Rollup-plugin-ts is a valuable tool for developers using Rollup to bundle TypeScript projects. Version 1.2.0 represents a significant evolution from version 0.2.0, offering enhanced features and updated dependencies. The core functionality remains consistent: streamlining the process of integrating TypeScript with Rollup, bundling declaration files (.d.ts), and respecting both Browserslist configurations for broad browser support and Babel configurations for advanced JavaScript transformations.

However, several key differences exist. Version 1.2.0 boasts an updated dependency tree, incorporating newer versions of crucial packages such as @babel/core, browserslist, and @types/node. This ensures better compatibility with modern JavaScript and TypeScript features, along with improved performance and security. Notably, version 1.2.0 depends on a newer typescript version ^3.7.4 while the 0.2.0 depends on ^3.6.2. Furthermore, version 1.2.0 introduces new dependencies that exposes more customization options. The change in repository URL in version 1.2.0 also reveals a change in maintainership.

The package size of the newer versions is significantly smaller (2269725 unpackedSize vs 860192 unpackedSize), which could impact build and deploy pipeline. The fileCount is also drastically different.

For developers, this means version 1.2.0 is likely to provide a smoother and more up-to-date experience, particularly when working with cutting-edge TypeScript or JavaScript code and for the ones that need support for newer typescript syntax. Be aware of the repository and maintainership change. Also be aware of possible impact on your build pipeline due to the version changes.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.