Version Details and Security Vulnerabilities

📦

sort-package-json

3.0.0

Comparision Betweeen 3.0.0 and 2.15.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

112.4 KB

112.69 KB

Version 3.0.0 Details

Sort-package-json version 3.0.0 introduces several notable updates compared to its predecessor, version 2.15.1, impacting developers who rely on this utility for organizing their package.json files. On the dependency front, semver sees an upgrade from version 7.6.0 to 7.7.1, ensuring compatibility with newer semantic versioning standards. The core functionality remains consistent, utilizing dependencies like get-stdin, tinyglobby, is-plain-obj, detect-indent, detect-newline, git-hooks-list, and sort-object-keys.

The most significant changes lie within the development dependencies. Version 3.0.0 boasts upgrades to crucial tools such as ava (from 4.3.3 to 6.2.0), eslint (aligning with the latest 9.21.0), and @eslint/js (also version 9.21.0). TypeScript support moves from version 4.8.4 to 5.8.2, allowing for more modern syntax and features, while lint-staged goes from 13.0.3 to 15.4.3 and the commitlint suite @commitlint/cli jumps from 17.1.2 to 19.7.1 alongside @commitlint/config-conventional also moving to 19.7.1., ensuring enhanced code quality and consistency. Semantic-release experiences a significant update from 19.0.5 to 24.2.3 streamlining the release automation. Moreover, dot-prop progresses from version 7.2.0 to 9.0.0. Version 3.0.0 is shipped using esbuild, improving the build speed and performances. These upgrades collectively offer developers a more robust and efficient development environment when working with sort-package-json. Notably the resolve package present in v2 is not present in v3. Developers benefit from improved linting, static analysis, and testing capabilities, leading to higher quality packages.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.