Version Details and Security Vulnerabilities

📦

stylus

0.61.0

Comparision Betweeen 0.61.0 and 0.60.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

143

144

Unpacked Size

357.24 KB

357.91 KB

Version 0.61.0 Details

Stylus, a robust and expressive CSS preprocessor, has released version 0.61.0, building upon the solid foundation of its predecessor, version 0.60.0. This update, published on November 4th, 2023, introduces key dependency updates, primarily focusing on internal tooling. Developers upgrading from 0.60.0, released on August 30th, 2023, will find that the core functionality of Stylus remains consistent, ensuring minimal disruption to existing projects.

The most notable change resides within the dependencies. Version 0.61.0 upgrades the "sax" parser from ~1.2.4 to ~1.3.0 and the "@adobe/css-tools" library from ~4.2.0 to ~4.3.1. These upgrades likely incorporate bug fixes, performance improvements, and potentially new features within those respective libraries, indirectly benefiting Stylus users. Developers relying on specific behaviors or features of these dependencies should review their release notes for detailed information on the changes implemented. The "glob", "debug", and "source-map" dependencies remain consistent across both versions, indicating a stable and reliable core tooling ecosystem. Also, the package has a slightly smaller unpacked size and one less file.

For developers already using Stylus, upgrading to 0.61.0 is generally recommended to leverage the updated dependencies. The MIT license allows for flexible usage and modification. New users will find Stylus a powerful alternative to CSS, offering features like variables, mixins, and functions, for more maintainable and expressive stylesheets. The active open-source community, supported by funding through Open Collective, ensures ongoing development and support for this valuable CSS superset.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.