postcss-initial - npm Package Compare versions

Comparing version 3.0.0 to 3.0.1

CHANGELOG.md

@@ -8,2 +8,5 @@ # Change Log
 
+## [3.0.1] - 2019-08-09
+ - Fix lodash.template vulnerability. See https://github.com/lodash/lodash/pull/4336
+
 ## [3.0.0] - 2018-08-16
@@ -10,0 +13,0 @@ - Upgrade PostCSS to 7.0.2. It breaks node@4 support. Thanks to @ansballard for contribution

package.json

 {
   "name": "postcss-initial",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "PostCSS plugin to fallback initial keyword.",
@@ -18,3 +18,3 @@ "keywords": [
   "dependencies": {
-    "lodash.template": "^4.2.4",
+    "lodash.template": "^4.5.0",
     "postcss": "^7.0.2"
@@ -21,0 +21,0 @@ },

No alert changes

Improved metrics

Total package byte prevSize

22336

increased by1.28%

Number of package files

9

increased by12.5%

Lines of code

547

increased by1.11%

Dependency changes

• Updatedlodash.template@^4.5.0