Version Details and Security Vulnerabilities

📦

stylus

0.64.0

Comparision Betweeen 0.64.0 and 0.63.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

143

Unpacked Size

357.16 KB

357.03 KB

Version 0.64.0 Details

Stylus version 0.64.0 introduces notable updates compared to its predecessor, version 0.63.0, making it an interesting upgrade for developers leveraging this robust CSS preprocessor. A key change lies in the updated dependencies. Specifically, the "glob" dependency jumps from version "^7.1.6" to "^10.4.5", potentially bringing improved file matching capabilities and enhanced security fixes. Another significant update affects the "sax" dependency, moving from "~1.3.0" to "~1.4.1", suggesting improvements in XML parsing, crucial for handling certain CSS constructs or related tooling. The "debug" dependency remains at "^4.3.2", ensuring consistent debugging support.

While the core functionality described as "Robust, expressive, and feature-rich CSS superset" remains constant, these dependency updates contribute to the overall stability and potentially the security of the Stylus ecosystem. Developers should examine the changelogs for "glob" and "sax" to fully understand the implications of these updates for their specific use cases. Furthermore, the "devDependencies" see a shift in the "mocha" version, going from "^9.2.0" to "^10.4.0", potentially indicating testing framework improvements and compatibility updates for those contributing to or testing Stylus itself. The newer version was released on October 20, 2024, a considerable time after version 0.63.0 released on March 5, 2024, so this new release includes the last updates to dependencies. The sizes of the archive differ a bit, the newer version having a unpackedSize of 365731, comparing with the 365596 of the older version.

For developers starting new projects, version 0.64.0 is recommended for its updated dependencies and potential security enhancements. Existing projects using Stylus should carefully evaluate the "glob" and "sax" updates before upgrading to ensure compatibility and avoid unexpected behavior.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.