Yargs evolved from version 13.3.2 to 14.0.0, presenting subtle yet impactful changes for developers. Both versions maintain the core philosophy of being a modern, pirate-themed successor to optimist, a tool for building interactive command-line tools. Key dependencies like y18n, cliui, find-up, set-blocking, string-width, which-module, get-caller-file, require-directory, and require-main-filename remain consistent, ensuring a stable base for argument parsing and command-line interface construction.
A notable difference lies in the yargs-parser dependency. Version 14.0.0 relies on yargs-parser version 13.1.1, while the older 13.3.2 uses version 13.1.2. This warrants checking the change log for yargs-parser to understand if any new features or fixes are present in the older 13.1.2 version that might affect the behavior of yargs.
The devDependencies also show variations. Though most, such as cpr, nyc, chai, chalk, mocha, which, rimraf, hashish, standard, coveralls, cross-spawn, and es6-promise, persist, version 13.3.2 uses standard-version version 6.0.1, which is upgraded to 7.0.0 in version 14.0.0. If you use standard-version within your project keep this in mind. The dist metadata indicates a slight decrease in fileCount from 42 to 41, and an increase in unpackedSize hinting towards internal structural or documentation modifications in the newer 14.0.0 release. Also the releaseDate information can be misleading because even if the version 14.0.0 is older, 13.3.2 was released later and is considered the previous *stable* release.
The are not vulnerabilities for the version 14.0.0 of the package yargs