Version Details and Security Vulnerabilities

📦

yargs

17.7.2

Comparision Betweeen 17.7.2 and 17.7.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

285.57 KB

285.55 KB

Version 17.7.2 Details

Yargs 17.7.2 is a minor version update to the popular command-line argument parsing library, succeeding version 17.7.1. Both versions share the same core dependencies, including y18n, cliui, escalade, string-width, yargs-parser, get-caller-file, and require-directory, ensuring continued compatibility and functionality for existing projects. The development dependencies also remain constant, indicating a consistent tooling and testing environment, which include tools like c8 for coverage, eslint for linting, and rollup for bundling. Developers can expect largely unchanged development workflows when upgrading.

The primary difference lies in the dist section, specifically the unpackedSize. Version 17.7.2 increases slightly to 292421 bytes from 17.7.1's 292404 bytes. This suggests that the new version includes minor code improvements, bug fixes, or documentation updates that subtly expand the package's size after unpacking. Although the file count remains at 62, suggesting no files were added or removed, a small increase in size might be indicative of changed comments, or small changes, rather than completely new features. The Release Date shifted from February 21st for version 17.7.1 to April 27th for version 17.7.2. This later release means that developers migrating will receive the newest stability fixes.

For developers relying on Yargs for streamlined command-line interface construction, this update offers a refined and potentially more stable experience over 17.7.1. The minor size difference suggests minimal impact on bundle sizes or performance, while the updated release offers bug fixes or minor improvements.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.