Version Details and Security Vulnerabilities

📦

sass-loader

10.1.0

Comparision Betweeen 10.1.0 and 10.0.5

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

66.9 KB

65.41 KB

Version 10.1.0 Details

Sass-loader versions 10.1.0 and 10.0.5 are both webpack loaders that allow developers to import Sass/SCSS files into their JavaScript bundles. While seemingly minor, the upgrade from 10.0.5 to 10.1.0 introduces several changes of interest. The core dependencies remain consistent, including klona, semver, neo-async, loader-utils, and schema-utils, ensuring stability in fundamental functionalities. Most of development dependencies also remain very similar.

Significant updates appear in the devDependencies, notably bumping jest from 26.6.0 to 26.6.3, Sass from 1.27.0 to 1.29.0, enhanced-resolve from 5.3.0 to 5.3.1, css-loader from 5.0.0 to 5.0.1, and file-loader from 6.1.0 to 6.2.0. Material-components-web was upgraded from 7.0.0 to 8.0.0, and eslint-config-prettier from 6.14.0 to 6.15.0. These updates often include bug fixes, performance improvements, and new features within those libraries, potentially enhancing the developer experience when working with sass-loader. A key consideration is the updated sass version, as upgrading could unlock new language features or resolve compatibility issues with specific Sass syntax.

The upgrade may also indirectly address compatibility with newer versions of webpack or other build tools. The release date difference (approximately a week) indicates that 10.1.0 likely incorporates fixes or enhancements discovered shortly after the 10.0.5 release. Developers should consult the sass-loader changelog for a comprehensive list of changes and potential breaking issues before upgrading. Choosing the latest version is usually preferable for latest features and fixes.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.