Zod is a TypeScript-first schema declaration and validation library, known for its static type inference capabilities. Comparing versions 1.10.4 and 1.10.3, the core functionality remains consistent, focused on providing a streamlined approach to data validation within TypeScript projects. Both versions share identical development dependencies, including tools like Jest for testing, TSLint for linting, and TypeScript itself. Developers can expect the same familiar workflow for schema definition and validation in both.
However, subtle differences exist. Version 1.10.4, released on August 28, 2020, has a slightly larger unpacked size of 247,413 bytes compared to version 1.10.3's 246,899 bytes, released on August 17, 2020. This hints at potential minor internal adjustments, bug fixes, or optimizations within the newer release. Crucially, the fileCount remains the same at 113, pointing away from major structural changes.
For developers already using Zod, upgrading to 1.10.4 presents a low-risk opportunity to potentially benefit from under-the-hood improvements. For new users, both versions offer a stable starting point for leveraging Zod's schema validation system, and considering the minimal differences the latest version may have the latest bug fixes. Consulting the Zod repository's commit history or changelog (if available) would provide more specific insight into the precise nature of changes between these versions and would be a great way of knowing which one to choose.
All the vulnerabilities related to the version 1.10.4 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.