Zod, a TypeScript-first schema declaration and validation library, saw a minor update from version 1.2.1 to 1.2.2 on April 7th, 2020. Both versions share the same core functionality: providing developers with a robust system for defining data schemas and validating JavaScript values against them, complete with static type inference for improved type safety. They both rely on the same suite of development dependencies, including Jest for testing, TSLint (though now deprecated in favor of ESLint in later versions), nodemon for development server restarts, ts-jest for TypeScript testing, prettier for code formatting, and TypeScript itself showcasing a commitment to maintaining code quality through tooling.
A key difference lies in the package details. Version 1.2.2 has a slightly larger unpacked size (163704 bytes) and contains 97 files, compared to version 1.2.1's 158310 bytes and 94 files. This suggests that version 1.2.2 includes some additions or modifications, potentially bug fixes, performance improvements, or new features, though without specific release notes, the nature of these changes remains unspecified. These updates, even in a minor version bump, can be important for developers concerned with stability and the latest improvements, even if subtle. The release dates offer a timestamp for developers tracking the library's evolution. For developers considering Zod, these early versions highlight the initial stages of a library focused on type-safe schema validation in TypeScript projects.
All the vulnerabilities related to the version 1.2.2 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.