Vue-tsc version 2.0.7 represents a subtle yet potentially impactful update over its predecessor, version 2.0.6. Released on March 20, 2024, it arrives approximately two weeks after version 2.0.6 (released on March 7, 2024), suggesting a focused effort on refinement or bug fixes. The core functionality, indicated by the consistent description regarding installation (npm i vue-tsc -D), remains unchanged. Examining the dependencies reveals the key difference: @volar/typescript has been bumped from version ~2.1.2 to ~2.1.3. This update in Volar's TypeScript integration is the most significant change and likely includes improvements in type checking, language service features, or bug resolutions within the Vue Single-File Component (SFC) context.
For developers using vue-tsc, this means a potential enhancement in their development experience, possibly leading to more accurate type information, better code completion, and fewer false positives during compilation. Users leveraging the most recent features of Vue and TypeScript should particularly benefit. While the semver and @vue/language-core dependencies remain consistent, ensuring compatibility across Vue versions, the @volar/typescript upgrade hints at optimized performance and refined features. The unpacked size difference (5591 bytes in 2.0.7 vs. 5664 bytes in 2.0.6), though minor, may reflect improvements in code efficiency. Finally, note that both versions maintain the same peer dependency on typescript:"*", signifying compatibility with any TypeScript version.
All the vulnerabilities related to the version 2.0.7 of the package
vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
A vulnerability has been discovered in vue-template-compiler, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass
or Object.prototype.staticStyle
to execute arbitrary JavaScript code. Vue 2 has reached End-of-Life. This vulnerability has been patched in Vue 3.