Version Details and Security Vulnerabilities

📦

sqlite3

5.1.7

Comparision Betweeen 5.1.7 and 5.1.6

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

3.19 MB

3.12 MB

Version 5.1.7 Details

SQLite3 version 5.1.7 represents a notable update from version 5.1.6, bringing several impactful changes for developers. The most significant shift lies in the dependencies. Version 5.1.7 replaces @mapbox/node-pre-gyp with prebuild-install and incorporates new dependencies bindings and node-addon-api. This suggests a move towards a more standardized and potentially more efficient approach for handling native addons, simplifying the installation process and potentially improving compatibility across different platforms. The node-addon-api version is significantly bumped from ^4.2.0 to ^7.0.0, which usually means that new features from node-addon-api are now used. The change in the prebuild dependency could indicate improvements in prebuilt binary availability. Developers should pay close attention to these changes, especially if they've encountered issues with native addon compilation in the past.

Further differences appear in the development dependencies. Version 5.1.7 upgrades the toolchain via eslint, significantly bumping it from version 6.8.0, to the version 8.56.0 and upgrades mocha from version 7.2.0 to 10.2.0. Additionally the new version adds prebuild as a dev dependency, which further shows the focus on prebuilds.

The core functionality of providing asynchronous, non-blocking SQLite3 bindings remains consistent, and the BSD-3-Clause license ensures continued open-source usage. The unpacked size of the package increases slightly from 3,270,334 bytes to 3,345,079 bytes, likely due to the updated dependencies and potentially new features or optimizations. The release date of January 5, 2024, marks version 5.1.7 as a relatively recent update.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.