cosmiconfig
10.0.1 · 30 Aug 2026MIT172.2M / weekRepositoryHomepagenpmAtom feed
Where each line stands
Plan an upgradeLatest releases
All 57 releases- 10.x · latest line
10.0.1
30 Aug 2026Dependency security update.
10.0.0
2 Aug 2026- breaking
The required version range is now
^22.18 || >=24. - breaking
Remove
typescriptin favor of Node's own type stripping. This means that TypeScript 7 projects are supported, but non-erasable type syntax likenamespaceorenumis unsupported. - breaking
JSON parsing uses the
JSON.parsefunction directly.parse-jsonis no longer used for better error messages, since Node has improved theirs.
- breaking
The required version range is now
^22.18 || >=24. - breaking
Remove
typescriptin favor of Node's own type stripping. This means that TypeScript 7 projects are supported, but non-erasable type syntax likenamespaceorenumis unsupported. - breaking
JSON parsing uses the
JSON.parsefunction directly.parse-jsonis no longer used for better error messages, since Node has improved theirs. Remove
import-freshdependency in favor of directly clearing the cache.Added support for UTF-16 config files
- 9.x · maintenance
9.0.2
7 Jun 2026Fixed a prototype chain issue that may happen when merging different config objects.
Fixed the
projectsearch strategy not correctly stopping at the package boundary.
Dependency tracking · free for 3 projects
Know when your own dependencies move
cosmiconfig shipped a new major in the last 12 months, among 4 releases. inlinr shows which of your projects are behind, and what the upgrade breaks.
Advisories reach you
An email when a critical or high advisory affects a project, before the next install.
Upgrades checked first
Peer ranges, Node, ESM-only and types changes read before you bump.
Only what matters
Majors and breaking notes stay; patches and sibling bumps fold into one line.
Reading releases, release notes and advisories…
Registry facts last checked 3 Nov 2026. Releases and advisories last read 3 Nov 2026.