Version Details and Security Vulnerabilities

📦

underscore

1.13.0

Comparision Betweeen 1.13.0 and 1.12.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

503

565

Unpacked Size

880.22 KB

650.35 KB

Version 1.13.0 Details

Underscore.js saw a release of version 1.13.0 on April 9, 2021, succeeding version 1.12.1, which was released on March 15, 2021. Both versions are described as JavaScript's functional programming helper library, aimed at providing utility functions for common programming tasks. The core functionality remains consistent, focusing on operations relating to objects, arrays and functions.

A notable change lies within the development dependencies. While many remained the same, there has been a significant update to the Rollup bundler tool. Version 1.12.1 relied on Rollup version 1.32.1, whereas version 1.13.0 upgrades this to version 2.40.0. Since Rollup is a module bundler for JavaScript, this update likely brings improvements in module handling, tree shaking (dead code elimination), and potentially faster and more efficient builds, resulting in a leaner final library size.

The dist section also highlights some interesting differences. Version 1.13.0 had 503 files inside the package compared to the 565 files of its predecessor. In Addition the unpacked size is bigger than in the previous version (901347 vs 665955). These metrics could suggest changes in the internal architecture or the inclusion of new or expanded functionalities and/or documentation within the library. Developers should be aware of these changes since the size of the package impacts the build performance.

Developers choosing between these versions of Underscore.js should consider the Rollup update within version 1.13.0 if they want to take advantage of the faster builds. Also it is important to consider the differences in the number of files and unpackedSize as additional information. Both versions maintain the same MIT license, ensuring flexible usage in a variety of projects.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.