Version Details and Security Vulnerabilities

📦

zone.js

0.14.6

Comparision Betweeen 0.14.6 and 0.14.5

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

138

Unpacked Size

1.95 MB

1.92 MB

Version 0.14.6 Details

Zone.js version 0.14.6 is a minor update to the popular JavaScript library, building upon the foundation laid by version 0.14.5. Both versions, designed for managing asynchronous operations with Zones, share core functionalities like handling timers, promises, and event listeners in a structured manner. Diving into the package.json metadata reveals key differences and shared characteristics that matter for developers.

The most apparent difference lies in the introduction of tslib as a direct dependency in version 0.14.5 (inherited by 0.14.6) signalling a potential shift or increased reliance on TypeScript helper functions within the library's internal workings. Both versions bundle a comprehensive suite of devDependencies necessary for testing and building the package. These include testing frameworks like Jest and Mocha, DOM manipulation packages like Domino for emulating browser environments during server-side rendering, and tools for type checking and code optimization such as @types/node, @externs/nodejs, and Google Closure Compiler.

The dist section also highlights some variations. While both tarballs contain the same number of files, the unpacked size of zone.js 0.14.6 is slightly larger at 2046177 bytes compared to 2012388 bytes for version 0.14.5. This size difference likely reflects the inclusion or modification of code related to the TypeScript helpers introduced with the new tslib dependency. Finally, it's really important to check the release dates: 0.14.6 was released on May 17, 2024, a couple of weeks after the 0.14.5 release on April 30, 2024. All those changes, even if apparently small, can have effects on the final developer expirience.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.