Version Details and Security Vulnerabilities

📦

rollup

4.36.0

Comparision Betweeen 4.36.0 and 4.35.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

2.58 MB

2.57 MB

Version 4.36.0 Details

Rollup version 4.36.0 offers subtle yet important updates compared to the previous stable version 4.35.0, making it a compelling choice for developers seeking a robust ES module bundler. While both versions share the core functionality of bundling JavaScript modules, the newer release incorporates key dependency upgrades enhancing performance and developer experience. Notably, vite jumps from version 6.2.0 to 6.2.1, acorn from version 8.14.0 to 8.14.1, and @eslint/js from version 9.21.0 to 9.22.0. Also, eslint itself receives a bump from 9.21.0 to 9.22.0. While these may seem like minor version bumps, they often include bug fixes, performance improvements, and new features that collectively contribute to a more stable and efficient bundling process.

Developers leveraging TypeScript will appreciate the updated @types/node dependency, advancing from version 18.19.79 to 18.19.80, potentially incorporating more accurate type definitions. The eslint-config-prettier is also upgraded, moving from version 10.0.2 to 10.1.1, suggesting refinement in code formatting rules. Additionally, there's an update in @inquirer/prompts, from version 7.3.2 to version 7.3.3, and rollup as a devDependency is also updated from version 4.34.9 to version 4.35.0 which can be interesting due to testing purposes.

Beyond specific dependency changes, the releaseDate indicates a more recent build, meaning that version 4.36.0 incorporates the latest bug fixes and optimizations available at the time of its release. The unpackedSize also slightly increases from 2698355 to 2708068. While the dependencies in the "optionalDependencies" section remain similar in both versions, the platform-specific rollups change their version from 4.35.0 to 4.36.0 to be aligned with rollup version. Although the difference is slight, staying current with the latest minor version ensures developers benefit from community-driven improvements and reduced risks associated with outdated dependencies.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.