Version Details and Security Vulnerabilities

📦

sinon

6.0.0

Comparision Betweeen 6.0.0 and 5.1.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

4.26 MB

3.3 MB

Version 6.0.0 Details

Sinon, a popular JavaScript library for test spies, stubs, and mocks, released version 6.0.0 shortly after version 5.1.1, offering developers improvements and potentially introducing some breaking changes. Both versions share the same core dependencies, ensuring stability in core functionality like diff, nise, lolex, lodash.get, type-detect, supports-color, and @sinonjs/formatio. In terms of development dependencies, version 6.0.0 brings some updates. Most notably, it includes rollup, puppeteer, lint-staged, @sinonjs/referee and rollup and some rollup plugins which are not present in version 5.1.1, suggesting improvements in the build process and potentially better support for modern JavaScript module formats.

The dist section reveals that version 6.0.0 has a slightly larger unpacked size and file count compared to version 5.1.1, hinting at added features, updated assets, or refactoring. For developers, the introduction of rollup and its plugins is the most noticeable change. Also, the jump to puppeteer is indicative of better testing coverage overall. Finally, the slightly larger file count might point to expanded feature sets, potentially including new matchers, spies, or stubs. Developers should consult the official changelog for a comprehensive list of specific changes and potential breaking API changes that might require code adjustments when upgrading from 5.1.1. Though not explicit. The upgrade hints at a modernizing of the toolchain and a wider range of features or enhancements for mock and stub creation.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.