Upgrading uglify-js 1 to 2
Unknown1.3.5 → 2.8.29Security2
SecurityHigh · CVSS 7.5Regular Expression Denial of Service in uglify-jsGHSA-c9f4-xj24-8jqx · CVE-2015-8858 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for the notes of 50 of 80 releases yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act 2 items need code or config changes
Requires Node.js >=0.8.0 from 2.5.0 (none stated before).
Adds source-map ~0.5.1, uglify-to-browserify ~1.0.0, yargs ~3.10.0.
Installs 16 packages in all (was 0).
Also installs align-text, camelcase, center-align, cliui, decamelize, is-buffer, kind-of, lazy-cache, longest, repeat-string, right-align, window-size, wordwrap.
What you must change
Security2
Regular Expression Denial of Service in uglify-js
High · CVSS 7.5Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
Critical · CVSS 9.8