UglifyJS, a widely used JavaScript parser, mangler/compressor, and beautifier toolkit, saw a recent update from version 3.19.2 to 3.19.3. Both versions share the same core functionalities, development dependencies (acorn ~8.7.1 and semver ~6.3.0), licensing under BSD-2-Clause, and repository details. They are both authored by Mihai Bazon. The key distinctions lie in the dist section and the release date. Version 3.19.3 was released on August 29, 2024, while version 3.19.2 was released on August 10, 2024; almost 3 weeks apart. A crucial difference between the versions is in their unpacked size; where version 3.19.3 shows a size of 1304556 bytes whereas version 3.19.2 exhibits a size of 1304139 bytes. The newer version is slightly larger. Although seemingly minor, this change implies internal code adjustments or additions. Developers should consider this small size difference when making update decisions, particularly given space constraints or strict performance requirements. While not explicitly stated, the release date and unpacked size difference suggest that version 3.19.3 likely includes bug fixes, minor performance improvements, or perhaps addressed specific edge cases discovered in version 3.19.2. Users are encouraged to examine the changelog, upgrade, and test their application.
The are not vulnerabilities for the version 3.19.3 of the package uglify-js