Version Details and Security Vulnerabilities

📦

rollup

4.28.0

Comparision Betweeen 4.28.0 and 4.27.4

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

2.48 MB

Version 4.28.0 Details

Rollup 4.28.0 represents a recent iteration in the ongoing development of this popular ES module bundler, building upon the foundation laid by version 4.27.4. While the core functionality remains consistent – providing a powerful and efficient tool for bundling JavaScript modules – the update introduces key refinements and dependency updates that developers should be aware of.

One notable change lies within the devDependencies. In version 4.28.0, "typescript":"^5.7.2" is upgraded from "typescript":"^5.6.3" and "rollup":"^4.27.4" is upgraded from "rollup":"^4.27.3" and "prettier":"^3.4.1" from "prettier":"^3.3.3". Also the version has changed to "@types/node":"^18.19.66" from "@types/node":"^18.19.64", "@types/mocha":"^10.0.10" from "@types/mocha":"^10.0.9", "@codemirror/view":"^6.35.0" from "@codemirror/view":"^6.34.3", "@codemirror/language":"^6.10.4" from "@codemirror/language":"^6.10.3", "typescript-eslint":"^8.16.0" from "typescript-eslint":"^8.15.0", "eslint-plugin-unicorn":"^56.0.1" from "eslint-plugin-unicorn":"^56.0.0", "@codemirror/search":"^6.5.8" from "@codemirror/search":"^6.5.7", "magic-string":"^0.30.14" from "magic-string":"^0.30.13". These updates signify improvements in tooling, potentially offering enhanced type checking, improved code formatting, and access to the latest features and bug fixes.

These updated dependency versions are important because they often bring performance improvements, security patches, and compatibility with newer language features. Developers should carefully review the changelogs of these updated dependencies to understand the specific impact on their Rollup projects. The newer release includes a more recent build date (2024-11-30) compared to the older release (2024-11-23), representing the value of the latest changes. While the file count remains the same, the unpacked size saw a slight increase, potentially hinting at added code or resources.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.