Zod is a TypeScript-first schema declaration and validation library, renowned for its static type inference. Version 1.7.1 builds upon the solid foundation of 1.7.0, offering subtle but important improvements. Both versions share identical core dependencies and development dependencies, indicating stability in their tooling and underlying infrastructure. These dependencies include testing frameworks like Jest and Ts-Jest, linting tools such as TSLint, and formatting with Prettier, ensuring code quality and consistency. The TypeScript version remains at 3.2, suggesting a commitment to compatibility.
The key difference lies in the package size and release date. Version 1.7.1, released on June 21, 2020, has an unpacked size of 241540 bytes, slightly larger than version 1.7.0 (238653 bytes), released on June 5, 2020. This increase, while modest, likely reflects bug fixes, minor feature additions, or internal optimizations deployed within those two weeks. Furthermore, both contain 127 files, which shows that the core structure of the package is the same and the difference might be file size.
For developers, this means upgrading to 1.7.1 offers a refined experience with potentially better performance or fewer edge-case bugs, all while maintaining the same API and development environment. The MIT license continues to provide freedom and flexibility for integration into diverse projects. Zod is a great tool and this minor upgrade is a testament to its incremental and reliable growth.
All the vulnerabilities related to the version 1.7.1 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.