Security News
Introducing the Socket Python SDK
The initial version of the Socket Python SDK is now on PyPI, enabling developers to more easily interact with the Socket REST API in Python projects.
com.github.openjson:openjson
Advanced tools
A clean-room Apache-licensed implementation of simple JSON processing
This code is extracted from the Android project to allow a clean-room implementation of the popular JSON API to be available under a free license as a small and independent dependency.
The original library is licensed under a standard BSD license with an additional line that requires the use of the software only for "non-evil" purposes. Since this is ill-defined, many downstream consumers of this software find this license condition unacceptable. The moral is don't put jokes into legal documents. More background information is collected by the Debian team members at https://wiki.debian.org/qa.debian.org/jsonevil. Relicensing the original library is impossible. See https://github.com/stleary/JSON-java/issues/331 for more information.
<dependency>
<groupId>com.github.openjson</groupId>
<artifactId>openjson</artifactId>
<version>1.0.11</version>
</dependency>
Thanks to the Android team for doing 99% of the work.
Thanks also to Simon Lessard for lending his critical eye and excellent suggestions.
Thanks to Tobias Soloschenko and Martin Grigorov with suggestions so open-json can help Apache Wicket avoid the problem.
FAQs
A clean-room Apache-licensed implementation of simple JSON processing
We found that com.github.openjson:openjson demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The initial version of the Socket Python SDK is now on PyPI, enabling developers to more easily interact with the Socket REST API in Python projects.
Security News
Floating dependency ranges in npm can introduce instability and security risks into your project by allowing unverified or incompatible versions to be installed automatically, leading to unpredictable behavior and potential conflicts.
Security News
A new Rust RFC proposes "Trusted Publishing" for Crates.io, introducing short-lived access tokens via OIDC to improve security and reduce risks associated with long-lived API tokens.