UglifyJS version 3.11.3 represents a minor update over its predecessor, version 3.11.2, in this widely used JavaScript minification toolkit. Both versions share the same core functionality as a JavaScript parser, mangler/compressor, and beautifier, ideal for optimizing code for production environments. They are released under the BSD-2-Clause license and maintain dependencies on acorn (version ~7.1.0) and semver (version ~6.3.0) for underlying functionalities. The package is maintained by Mihai Bazon.
The key difference lies in subtle improvements and refinements introduced in version 3.11.3. While both versions contain 20 files, the unpacked size of version 3.11.3 is slightly larger, measuring 918538 bytes compared to 3.11.2's 909441 bytes. This suggests potential modifications to the codebase, such as bug fixes, performance enhancements, or added features that contribute to the increased file size. Developers should consider upgrading to version 3.11.3 to benefit from these incremental improvements, particularly if they encountered issues in the previous version. The release date of version 3.11.3 is October 19, 2020, while version 3.11.2 was released on October 11, 2020, roughly a week apart. This quick iteration suggests an active development cycle and responsiveness to user feedback.
The are not vulnerabilities for the version 3.11.3 of the package uglify-js