Vue-tsc version 2.0.6 brings subtle yet important updates compared to its predecessor, version 2.0.5. Both versions serve the same purpose: streamlining Vue.js development by providing TypeScript support and type checking, enhancing code quality and developer experience. The core functionality remains consistent, providing a command-line interface to type-check Vue single-file components (.vue files) using the TypeScript compiler.
The key difference lies in the updated dependencies. Version 2.0.6 upgrades @volar/typescript from ~2.1.1 to ~2.1.2 and @vue/language-core from 2.0.5 to 2.0.6. Although seemingly minor, these dependency updates can encompass bug fixes, performance improvements, and new features within the Volar TypeScript language service and the Vue Language Core. Note that Volar provides language tooling support, offering features like autocompletion, diagnostics, and refactoring for Vue projects in IDEs. The vue-tsc leverages and depends on it.
Developers considering an upgrade should evaluate these dependency changes. While @types/node remains unchanged in development dependencies, staying at "latest," the peer dependency on typescript remains broad ("*"), indicating compatibility with a wide range of TypeScript versions. Always adhere to semantic versioning guidelines when incorporating new dependencies to test how the update affects the app. The license for the package is MIT, which ensures quite a big level of freedom when incorporated into any kind of project. Finally both versions share the same unpacked size.
All the vulnerabilities related to the version 2.0.6 of the package
vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
A vulnerability has been discovered in vue-template-compiler, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass or Object.prototype.staticStyle to execute arbitrary JavaScript code. Vue 2 has reached End-of-Life. This vulnerability has been patched in Vue 3.
