Version Details and Security Vulnerabilities

📦

rollup

4.48.0

Comparision Betweeen 4.48.0 and 4.47.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

2.63 MB

2.62 MB

Version 4.48.0 Details

Rollup 4.48.0 represents a minor version bump from 4.47.1, bringing subtle yet noteworthy changes for developers leveraging this next-generation ES module bundler. Both versions maintain the same core description, license, repository, and author, indicating a continued commitment to the project's goals and maintainership. The primary dependency, @types/estree, remains consistent, suggesting no significant breaking changes to the underlying JavaScript AST structure. However, the newer version introduces several updated development dependencies.

Specifically, the rollup dev dependency itself is updated from version 4.46.2 to 4.46.3, indicating internal tooling or testing enhancements. @types/node sees an incremental update from 20.19.10 to 20.19.11, likely providing more precise type definitions for Node.js APIs used in the development process. @napi-rs/cli receives a bump from 3.1.4 to 3.1.5, potentially improving the developer experience when working with Native API modules. The most significant change is a shift from typescript-eslint 8.39.1 to 8.40.0 and @inquirer/prompts 7.8.2 to 7.8.3 that may bring new linting rules or prompt customization options respectively. Also @codemirror/language changes from version 6.11.2 to 6.11.3. Finally, unpacked size gets a little bigger indicating the addition of some new features or assets.

The optional dependencies, which cater to platform-specific builds of Rollup, are updated to reflect the core version 4.48.0 for all target architectures, ensuring consistency across different operating systems and CPU architectures. While these point to under-the-hood changes, developers should consult the official changelog for a complete picture of bug fixes, performance enhancements, and new features introduced in version 4.48.0.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.