Version Details and Security Vulnerabilities

📦

svelte

5.2.2

Comparision Betweeen 5.2.2 and 5.2.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

366

Unpacked Size

2.23 MB

Version 5.2.2 Details

Svelte 5.2.2 represents a minor version update to the Svelte JavaScript framework, building upon the foundations laid by version 5.2.1. Both versions share the same core dependencies, ensuring compatibility and feature parity in areas like AST parsing (acorn, acorn-typescript), sourcemap handling (remapping, sourcemap-codec), accessibility tooling (aria-query, axobject-query), and general utility libraries (esrap, esm-env, zimmerframe, is-reference, magic-string, locate-character). The development dependencies also remain consistent, utilizing popular tools such as Rollup, Vitest, and esbuild for bundling, testing, and building respectively. TypeScript support and related utilities like dts-buddy are retained, alongside testing frameworks such as Playwright and various Rollup plugins.

The key distinction between the two versions is subtle but significant. While the file count in the distributed package stayed at 366, the unpacked size increased slightly from 2,335,713 bytes in version 5.2.1 to 2,336,429 bytes in version 5.2.2. This increase suggests that version 5.2.2 introduces minor improvements, bug fixes, or small feature additions that lead to a slight expansion of the overall codebase. For developers upgrading, this means that no major breaking changes are expected, ensuring a relatively smooth transition. Svelte 5.2.2 refines and optimises the existing feature set, delivering a stable and reliable environment for building reactive web applications and components. Developers should test their application after the update to ensure that these incremental adjustments do not introduce any particular issues.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.