UglifyJS version 3.13.5 represents a minor update to the popular JavaScript minification toolkit compared to its predecessor, version 3.13.4. Both versions share the same core functionality as a parser, mangler, compressor, and beautifier for JavaScript code, licensed under the BSD-2-Clause license and maintained in the same GitHub repository. Developed by Mihai Bazon, the package continues to offer powerful JavaScript optimization capabilities.
The key difference lies in the updated dependency on acorn, a JavaScript parser. Version 3.13.5 upgrades to acorn version ~8.2.1 from ~7.1.0 in version 3.13.4. This update likely incorporates bug fixes, performance improvements, and potentially new ECMAScript syntax support offered by the newer acorn release. Developers should note this if their code uses recently added JavaScript features, as the upgraded parser ensures broader compatibility and accurate parsing. Furthermore, the unpacked size of version 3.13.5 (1,139,102 bytes) is slightly larger than version 3.13.4 (1,112,538 bytes), possibly due to the updated acorn dependency and associated changes. Lastly consider release date in order to better understand the context of the changes.
The are not vulnerabilities for the version 3.13.5 of the package uglify-js