Unplugin-auto-import simplifies JavaScript and TypeScript development by automatically registering global imports for Vite and Webpack projects, eliminating the need for manual import statements. Version 0.11.1 builds upon the solid foundation of 0.11.0, offering subtle yet important improvements for developers.
The core functionality remains consistent: seamlessly integrating with build tools to provide on-demand global imports, powered by dependencies like unimport, unplugin, and @antfu/utils. This functionality reduces boilerplate code and enhances readability, crucial for maintaining large projects.
Key differences between the versions lie primarily in the updated dependency versions. Notably, unplugin is upgraded from version 0.8.1 to 0.9.0, and vitest moves from 0.20.3 to 0.21.0. This indicates that developers can expect enhancements and bug fixes within the plugin ecosystem. Crucially, @types/node is updated from version 18.6.3 to 18.6.4.
Furthermore, the newer version includes updates and potential refinements that result in a slightly larger unpacked size (66050 bytes vs. 64875 bytes), along with a change in the file count. Developers should upgrade to version 0.11.1 to benefit from the latest improvements, dependency updates, and stability refinements, ensuring compatibility with newer versions of Vite, Webpack, and related tools. The updated package offers a refined developing experience for those using modern JavaScript/TypeScript frameworks, streamlining the import process.
All the vulnerabilities related to the version 0.11.1 of the package
antfu/utils vulnerable to prototype pollution
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.