Version Details and Security Vulnerabilities

📦

uglify-js

3.13.3

Comparision Betweeen 3.13.3 and 3.13.2

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

1.06 MB

Version 3.13.3 Details

UglifyJS has released version 3.13.3, a minor update from the previous stable version 3.13.2, continuing its role as a vital JavaScript parser, mangler, compressor, and beautifier toolkit for developers. Both versions share the same core dependencies, relying on Acorn version ~7.1.0 for parsing and Semver version ~6.3.0 for semantic versioning. The licensing remains consistent under the BSD-2-Clause license, ensuring broad usability for various projects. Mihai Bazon continues as the author, solidifying project leadership.

A key difference lies the unpacked size of the package, with version 3.13.3 slightly larger at 1109939 bytes compared to 3.13.2's 1106906 bytes, suggesting potential bug fixes, performance improvements, or added features. The number of files included remains steady at 20. The release dates mark an update cadence of roughly one week, with version 3.13.3 published on March 28, 2021, following 3.13.2 on March 21, 2021.

Developers considering upgrading should investigate the specific changes introduced in 3.13.3 that resulted in the size increase. While the changes might be small, they might tackle vulnerabilities present in the prior version or solve compatibility issues with modern JavaScript features. Reviewing the changelog or commit history on the UglifyJS GitHub repository is recommended to determine if the update addresses any known issues affecting their projects. This incremental release approach ensures the ongoing refinement and optimization of UglifyJS, maintaining it as a reliable tool for JavaScript minification and code optimization.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.