Version Details and Security Vulnerabilities

📦

sass-loader

7.0.2

Comparision Betweeen 7.0.2 and 7.0.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

39.56 KB

39.33 KB

Version 7.0.2 Details

Sass-loader versions 7.0.1 and 7.0.2 are both webpack loaders designed to compile Sass/SCSS files into CSS. Targeting developers using webpack, both versions share the same core functionality, compiling Sass/SCSS into CSS for inclusion in webpack bundles. They have identical dependencies, including pify, neo-async, clone-deep, lodash.tail, and loader-utils, indicating the underlying mechanism for asynchronous operations, data manipulation, and utility functions remains constant. Similarly, the devDependencies, used for testing and development, are the same, ensuring consistent testing and development environments. This includes tools like nyc for coverage, mocha for testing, eslint for linting, and webpack itself for bundling.

The peerDependencies specifying compatible webpack versions "^3.0.0 || ^4.0.0" is consistent across both versions, important for webpack users verifying compatibility. The key visible difference lies in the dist metadata. Version 7.0.2 has an unpacked size of 40507 bytes compared to 40275 bytes in version 7.0.1. Also the release date distinguishes the releases, with version 7.0.2 released on "2018-06-02" and version 7.0.1 released on "2018-04-13". This small difference in size indicates minor changes, bug fixes, or optimizations were introduced in version 7.0.2, but didn't impact dependencies. For developers, this suggests a low-risk update, addressing potential underlying issues without introducing breaking changes. Developers are encouraged to upgrade to the latest version, 7.0.2 to ensure they benefit from the latest improvements.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.