Version Details and Security Vulnerabilities

📦

yargs

3.11.0

Comparision Betweeen 3.11.0 and 3.10.0

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

N/A

Version 3.11.0 Details

Yargs version 3.11.0 represents a minor update over the previous stable version, 3.10.0, of this popular command-line argument parsing library for Node.js. Both versions maintain the core philosophy of providing a lightweight and straightforward method for processing command-line options into an easily accessible argv hash, eliminating the need for complex optstring configurations.

A key difference lies within the dependencies. Version 3.11.0 updates the window-size dependency to version ^0.1.1, offering potential improvements or bug fixes related to determining terminal window dimensions, which is used for formatting output in tools like help messages. On the other hand, version 3.10.0 depends on version 0.1.0 of the same package. Likewise, version 3.11.0 uses "^3.0.0" of chai while version 3.10.0 uses version "^2.2.0" of the same package. Furthermore, the standard version for version 3.11.0 is "^4.2.1" while the standard version for version 3.10.0 is "^3.11.1"

For developers considering an upgrade, the updated window-size and chai dependency might resolve specific rendering issues or introduce slight behavioral changes. However, given the semantic versioning used, these should primarily be bug fixes and minor enhancements. Yargs continues to be licensed under the permissive MIT license, the library's author remains Alex Ford, and the repository stays consistent. The releases are also relatively close in time; version 3.11.0 was released on June 15, 2015, while version 3.10.0 was released on May 29, 2015. Yargs simplifies command-line interface creation, handling argument parsing smoothly.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.