Version Details and Security Vulnerabilities

📦

sinon

8.0.0

Comparision Betweeen 8.0.0 and 7.5.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

1.8 MB

7.18 MB

Version 8.0.0 Details

Sinon.js version 8.0.0 introduces notable updates and refinements compared to its predecessor, version 7.5.0. A significant change lies in the updated dependencies, reflecting the project's commitment to staying current with supporting libraries. Core dependencies like diff, nise, lolex, supports-color, @sinonjs/samsam, and @sinonjs/formatio all see version bumps, potentially offering performance improvements, bug fixes, or new features. Developers should review these updated dependencies to ensure compatibility with their existing projects.

The development dependencies also exhibit a shift, with upgrades to tools like husky, proxyquire, and @sinonjs/referee. Some packages, such as rollup, native-promise-only, rollup-plugin-commonjs, rollup-plugin-node-globals, rollup-plugin-node-resolve and rollup-plugin-node-builtins are removed, hinting at changes in the build process or tooling. Worth noting is the introduction of dependency-check and markdownlint-cli plus a version upgrade to some packages like eslint-config-prettier and eslint-plugin-prettier which can mean a stronger stance regarding the code validation/formatting.

The dist object reveals a considerable reduction in the unpacked size from 7532927 bytes in version 7.5.0 to 1890954 bytes in version 8.0.0. This suggests a more optimized build, potentially leading to faster installation times and reduced disk space usage though, given the fileCount has increased there's chances it might be related also to a different packaging approach. Developers will appreciate the smaller footprint, making Sinon.js even more convenient to integrate into their projects. Finally, the releaseDate also indicates a recent update, showing that the library is actively maintained.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.