# What changed in @vercel/ncc

> 5 changes in @vercel/ncc 0.43 to 0.44 from its official release notes, upgrade guides and advisories: 1 breaking, 1 security. Each one cited. Sources checked 2026-10-20. HTML: https://unstale.sh/npm/@vercel/ncc/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @vercel/ncc 0.44

### Fixes and other changes

- ESM builds preserve runtime createRequire, preventing it from being lost in the bundled output. (0.44.1) — [release notes](https://github.com/vercel/ncc/releases/tag/0.44.1)

## @vercel/ncc 0.43

### Breaking changes

- Adds support for Node 24 and 26 and removes support for Node 20. (0.43.0) — [release notes](https://github.com/vercel/ncc/releases/tag/0.43.0)

### Security

- Fixes a predictable global cache directory in /tmp that enabled symlink and hijack risks. (0.43.0) — [release notes](https://github.com/vercel/ncc/releases/tag/0.43.0)

### Behavior and default changes

- Prioritizes TypeScript over JSON during extension resolution. (0.43.0) — [release notes](https://github.com/vercel/ncc/releases/tag/0.43.0)

### Tooling

- Supports TypeScript 6 transpile builds. (0.43.0) — [release notes](https://github.com/vercel/ncc/releases/tag/0.43.0)