Version Details and Security Vulnerabilities

📦

rollup

4.38.0

Comparision Betweeen 4.38.0 and 4.37.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

2.59 MB

2.58 MB

Version 4.38.0 Details

Rollup 4.38.0 introduces several updates that build upon the solid foundation of version 4.37.0, making it a worthwhile upgrade for developers. One key difference lies in the dependencies: @types/estree moves from version 1.0.6 to 1.0.7, potentially bringing enhanced TypeScript support and better type definitions for ESTree nodes. On the devDependencies front, eslint jumps from version 9.22.0 to 9.23.0, aligning the project with the latest linting rules. Another subtle yet significant advancement is the @types/node package, upgraded from 18.19.80 to 18.19.83, promising improved compatibility with newer Node.js features. The upgrade of eslint-plugin-unicorn from version 57.0.0 to 58.0.0 could introduce new and helpful linting rules for cleaner code. Also, there is an update regarding eslint-plugin-prettier that moves from 5.2.3 to 5.2.4 and vite is being upgraded from 6.2.2 to 6.2.3.

Furthermore, the core Rollup binaries within optionalDependencies are updated from 4.37.0 to 4.38.0 across different platforms (darwin, freebsd, linux, android, and win32) and architectures. This ensures that developers deploying to diverse environments benefit from the latest optimizations and bug fixes within Rollup's core functionalities. Specifically, developers should pay attention to the improvements in ES module bundling, tree-shaking, and overall performance, which are the hallmarks of Rollup. If developers are using TypeScript, Node.js or needing ES module bundling, this version provides the latest versioning of those packages and may be worth the upgrade.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.