Uglify-js, a widely used JavaScript toolkit for parsing, minifying, compressing, and beautifying code, saw a release of version 3.14.5 on December 13, 2021, following version 3.14.4 released on November 30, 2021. Both versions share the same core description and licensing under the BSD-2-Clause license, ensuring broad compatibility. They also depend on the same versions of acorn (version ~8.2.1) and semver (version ~6.3.0), indicating stability in their underlying parsing and version management dependencies.
The key difference lies in the unpacked size of the distribution, with version 3.14.5 weighing in at 1,188,776 bytes compared to 3.14.4's 1,185,973 bytes. This suggests that version 3.14.5 includes some minor improvements, bug fixes, or additional features that resulted in a slightly larger package size. However the file count is identical for both.
For developers considering using Uglify-js, these versions offer reliable JavaScript manipulation functionalities, backed by the proven track record of Mihai Bazon, the library's author. The minor version increment suggests improvements, hence upgrading to version 3.14.5 is encouraged to benefit from any recent fixes, though detailed changelogs should be consulted for specific changes.
The are not vulnerabilities for the version 3.14.5 of the package uglify-js