# What changed in i18n-js

> 4 changes in i18n-js 4 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-20. HTML: https://unstale.sh/npm/i18n-js/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## i18n-js 4

### Security

- Fixes prototype pollution: paths containing __proto__, constructor, or prototype no longer walk into Object.prototype, while those words remain usable as regular translation keys. (4.5.4) — [release notes](https://github.com/fnando/i18n/blob/dc86de970e364bcd5af2e5ef9a56dfbbe128071f/CHANGELOG.md#v454---oct-6-2026)

### Behavior and default changes

- numberToHuman now supports pluralized units. (4.5.2) — [release notes](https://github.com/fnando/i18n/blob/dc86de970e364bcd5af2e5ef9a56dfbbe128071f/CHANGELOG.md#v452---feb-5-2026)

### Fixes and other changes

- Fixed handling of BigNumber raising when receiving invalid numbers by default on v10. (4.5.3) — [release notes](https://github.com/fnando/i18n/blob/dc86de970e364bcd5af2e5ef9a56dfbbe128071f/CHANGELOG.md#v453---mar-4-2026)
- The separator is now applied when stripInsignificantZeros is false. (4.5.2) — [release notes](https://github.com/fnando/i18n/blob/dc86de970e364bcd5af2e5ef9a56dfbbe128071f/CHANGELOG.md#v452---feb-5-2026)