Upgrading pg 3 to 4
Breaking3.6.4 → 4.5.7Breaking1Security1New3Changed2
BreakingUpgrade verdict
1 breaking change and a security fix.
In plain terms
- The package was rewritten in TypeScript. It should work the same, but class names or small details may have changed in ways that could affect some code.
- Remote Code Execution in pg
Must act 2 items need code or config changes
No longer runs install when installed.
Adds semver ^4.1.0.
Drops bindings, nan.
Installs 16 packages in all (was 11).
What you must change
Breaking1
Converts the library to TypeScript, with identical behavior but possible subtle breaking changes from renamed classes or small inconsistencies.
Security1
Remote Code Execution in pg
Critical · CVSS 9.8