
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@asyncapi/diff
Advanced tools
AsyncDiff is a library which compares two AsyncAPI Documents and provides information about the differences by pointing out explicitly informations like breaking changes.
AsyncDiff is a library that compares two AsyncAPI files and provides information about the differences by pointing out explicitly information like breaking changes.
npm install @asyncapi/diff
NOTE: The library doesn't have a built-in parser to parse the given AsyncAPI document. Thus, you have to make sure they provide the valid & dereferenced AsyncAPI document as an input. You can use the AsyncAPI parser to parse and validate the AsyncAPI file first. You can use other tools, but you must make sure that the document is valid and dereferenced.
import { diff } from "@asyncapi/diff"; // const { diff } = require('@asyncapi/diff');
const output = diff(firstDocument, secondDocument, {
overrides: {
// object to override the standard
},
});
This library has a pre-configured standard which marks a change as breaking, non-breaking or unclassified. This standard data is stored as an object inside the standard.ts file.
The format of this standard object is explained in this document.
To understand the format of overriding object, take a look at this document.
The overrides object must be passed in the following format:
{
[jsonPointer]: {
add: 'breaking' | 'non-breaking' | 'unclassified'
remove: 'breaking' | 'non-breaking' | 'unclassified'
edit: 'breaking' | 'non-breaking' | 'unclassified'
}
}
See the index document to get all the helper methods this library offers.
const output = diff(firstDocument, secondDocument);
output.getOutput(); // the whole output data
output.breaking(); // the breaking changes
output.nonBreaking(); // the non-breaking changes
output.unclassified(); // the unclassified changes
const output = diff(firstDocument, secondDocument, {
overrides: {
"/servers/*/protocol": {
add: "non-breaking",
remove: "breaking",
edit: "unclassified",
},
},
});
This library supports outputs:
jsonyaml or ymlmarkdown or mdconst jsonOutput = diff(firstDocument, secondDocument, {
outputType: "json",
});
const yamlOutput = diff(firstDocument, secondDocument, {
outputType: "yaml" | "yml",
});
const markdownOutput = diff(firstDocument, secondDocument, {
outputType: "markdown" | "md",
});
With markdown output, you can also choose subtypes of the changes as JSON(json) or YAML(yaml or yml).
const markdownOutput = diff(firstDocument, secondDocument, {
outputType: "markdown" | "md",
markdownSubtype: "json" | "yaml" | "yml",
});
Checkout the index document to see all the APIs this library offers.
npm run testnpm run lintHelp us make this library more robust. Read CONTRIBUTING guide & start contributing.
Thanks goes to these wonderful people (emoji key):
Aayush Kumar Sahu 💻 📖 🚧 🤔 👀 ⚠️ | Lukasz Gornicki 🤔 👀 🚧 | Maciej Urbańczyk 👀 | Jonas Lagoni 👀 | Vinit Shahdeo 👀 | Anubhav Vats 👀 |
Shiven Sinha 💻 ⚠️ | Debajyoti Halder 📖 |
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
AsyncDiff is a library which compares two AsyncAPI Documents and provides information about the differences by pointing out explicitly informations like breaking changes.
The npm package @asyncapi/diff receives a total of 24,926 weekly downloads. As such, @asyncapi/diff popularity was classified as popular.
We found that @asyncapi/diff demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.