Version Details and Security Vulnerabilities

📦

svelte

5.1.1

Comparision Betweeen 5.1.1 and 5.1.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

362

Unpacked Size

2.19 MB

2.18 MB

Version 5.1.1 Details

Svelte 5.1.1 represents a minor update to the Svelte framework, building upon the foundation laid by version 5.1.0. Both versions share the same core dependencies, including acorn for JavaScript parsing, esrap for grammar definition, esm-env for ECMAScript module environment detection, and aria-query and axobject-query for accessibility-related functionalities. Vital tools like magic-string for source code manipulation and @ampproject/remapping and @jridgewell/sourcemap-codec for source map handling remain consistent.

The development dependencies, crucial for building and testing Svelte itself, remain unchanged between these versions, showing a continued investment in the existing toolchain. Developers can expect familiar build processes using Rollup, robust testing capabilities with Vitest, efficient transpilation through esbuild, and consistent type checking with TypeScript. The "@rollup/plugin-*" family ensures compatibility with various module formats and optimizations.

The critical difference lies in the "dist" field. While both versions have the same "fileCount" of 362, the "unpackedSize" of Svelte 5.1.1 is slightly larger at 2291237 bytes compared to 2290849 bytes in Svelte 5.1.0. This suggests that the new release includes some bug fixes that may affect internal code generation that are not affecting the API usage. The releases were very close to each other, one day apart, suggesting a quick fix for a bug. Developers should upgrade to Svelte 5.1.1 to benefit from these fixes, ensuring greater stability and reliability in their applications. The release date indicates that Svelte 5.1.1 was released on October 24, 2024, a day after Svelte 5.1.0, further emphasizing its role as a rapid follow-up release.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.