Zod, a TypeScript-first schema declaration and validation library renowned for its static type inference, released version 3.19.0 on September 6, 2022, succeeding version 3.18.0 released on August 9, 2022. Both versions maintain identical development dependencies, signaling stability in the tooling and testing environment. Developers integrating Zod into their projects can expect a consistent experience with tools like tsx, jest, eslint, and rollup remaining unchanged.
The notable difference lies in the package's distribution details. Version 3.19.0 has a fileCount of 44 and an unpackedSize of 482582, compared to version 3.18.0's fileCount of 40 and unpackedSize of 479896. This indicates an increase of 4 files and a slight size increase of approximately 2.7KB in the newer version. While seemingly minor, this suggests additions or modifications within the core library, potentially including new features, bug fixes, or internal refactoring that could subtly impact validation behavior or performance. Developers should consider reviewing the changelog or release notes for a comprehensive understanding of these changes before upgrading. The core description, dependencies and dev dependencies remain the same showing a stable library that received mostly bug fixes, documentation updates or minor improvements between versions. The funding, author and repository information remained the same, showing consistency in the project's foundation and maintainership.
All the vulnerabilities related to the version 3.19.0 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.