Webpack Manifest Plugin version 1.1.0 brings improvements over its predecessor, version 1.0.1, primarily concerning dependency management. While both versions serve the core function of generating asset manifests for webpack builds, aiding in cache busting and efficient asset loading, a key distinction lies in their dependencies. Version 1.1.0 introduces a more flexible lodash dependency, specifying a version range of ">=3.5 <5", compared to version 1.0.1's stricter "^3.5.0". The newer version also incorporates "fs-extra" as a dependency, explicitly requiring version "^0.30.0". This enhancement suggests that version 1.1.0 leverages the extended file system functionalities provided by fs-extra. Developers upgrading should recognize that their projects will now rely on fs-extra and ensures compatibility with a broader range of lodash versions. Both versions maintain identical development dependencies, including testing with Jasmine and integration with webpack itself, alongside tools like memory-fs, css-loader, style-loader, and extract-text-webpack-plugin, implying a consistent development and testing environment. Version 1.1.0 was released later, in October 2016, compared to version 1.0.1 in April 2016, reflecting ongoing maintenance and improvements to the plugin. These small steps allow for a more robust support, for different build pipelines and reduces the chances of breakages due to dependency conflicts.
The are not vulnerabilities for the version 1.1.0 of the package webpack-manifest-plugin