Version Details and Security Vulnerabilities

📦

webpack-manifest-plugin

5.0.1

Comparision Betweeen 5.0.1 and 5.0.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

35.95 KB

35.81 KB

Version 5.0.1 Details

Webpack Manifest Plugin version 5.0.1 introduces several notable updates compared to its predecessor, version 5.0.0, offering developers an enhanced experience in generating asset manifests for their webpack builds. Key improvements are visible in the development dependencies, showcasing an upgrade in the tooling and testing infrastructure. While both versions share core dependencies like tapable and webpack-sources, the later version exhibits significant advancements in its developer dependencies.

Specifically, version 5.0.1 integrates newer versions of crucial packages such as ava, typescript, and webpack itself, ensuring compatibility with the latest features and performance optimizations. The update to webpack from version 5.47.0 to 5.75.0 brings substantial improvements in build times and module resolution, enhancing the overall development workflow. Furthermore, the introduction or update of packages like @wordpress/dependency-extraction-webpack-plugin and upgrades to @types/node, @types/webpack, and @types/webpack-sources suggest a focus on improved type safety and integration with broader JavaScript ecosystems. The adoption of eslint-config-shellscape version 6.0.0 from 4.2.0 hints that the development moved into a new linting configuration.

These enhancements collectively indicate a concerted effort to modernize the plugin's development environment, aligning it with current best practices and providing developers with a more robust and reliable asset manifest generation process. The releaseDate disparity (2025-03-11 for 5.0.1 vs. 2022-03-08 for 5.0.0) suggests a potentially incorrect date for the v5.0.1 version since releases can't be in the future.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.