Version Details and Security Vulnerabilities

📦

sinon

7.2.4

Comparision Betweeen 7.2.4 and 7.2.3

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

6.72 MB

4.45 MB

Version 7.2.4 Details

Sinon version 7.2.4 is a patch release following 7.2.3, addressing updates primarily in its development dependencies. For developers using Sinon for creating test spies, stubs, and mocks in JavaScript, the core functionality remains consistent between the two versions, so upgrading won't introduce breaking changes in their existing tests.

The dependency updates are mostly related to the tooling used in Sinon's development workflow. Notably, nise (a fake server library) is updated from 1.4.8 to 1.4.10, @sinonjs/samsam (assertion library) goes from 3.0.2 to 3.1.1, and @sinonjs/referee (custom assertion matchers) gets bumped from 3.1.0 to 3.1.1. Several devDependencies were also updated, like eslint, prettier and @babel/core, contributing to improved linting, code formatting and JavaScript transpilation processes during the development of the library itself. Puppeteer goes from 1.11.0 to 1.12.2, while babel-plugin-istanbul also sees a small update, likely to improve code coverage reporting. This patch comes with an unpacked size of 7047379 bytes, which is quite larger than the 4667392 bytes from 7.2.3, probably due to the updated dependencies.

These changes wouldn't generally impact the end-user directly, but indicate a continued commitment to maintaining and improving the underlying codebase and development practices. A developer would upgrade to stay current with the latest dependency fixes and improvements, indirectly benefiting from a healthier and more robust testing library.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.