
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
@jsonjoy.com/json-equal
Advanced tools
This library contains the fastest JSON deep comparison algorithms.
deepEqual — deep comparison of JSON objects. Faster than fast-deep-equal and
fast-equals packages.$$deepEqual — if the comparison JSON object is known in advance, this function
can pre-compile a javascript function for comparison, which is about an order of magnitude
faster than deepEqual.deepEqualimport {deepEqual} from 'lib/json-equal/deepEqual';
deepEqual(a, b); // true/false
$$deepEqualimport {$$deepEqual} from 'lib/json-equal/$$deepEqual';
const js = $$deepEqual(a);
const fn = eval(js);
fn(b); // true/false
node benchmarks/json-equal/bench.deepEqual.js
json-equal (v1) x 873,303 ops/sec ±0.34% (96 runs sampled), 1145 ns/op
json-equal (v2) x 664,673 ops/sec ±0.44% (97 runs sampled), 1504 ns/op
json-equal (v3) x 710,572 ops/sec ±0.15% (100 runs sampled), 1407 ns/op
fast-deep-equal x 620,740 ops/sec ±0.34% (101 runs sampled), 1611 ns/op
fast-equals x 812,390 ops/sec ±0.11% (101 runs sampled), 1231 ns/op
lodash.isEqual x 182,440 ops/sec ±0.18% (98 runs sampled), 5481 ns/op
json-equal/deepEqualCodegen x 6,161,316 ops/sec ±0.30% (101 runs sampled), 162 ns/op
json-equal/deepEqualCodegen (with codegen) x 47,583 ops/sec ±0.11% (100 runs sampled), 21016 ns/op
Fastest is json-equal/deepEqualCodegen
FAQs
Deep equality check for JSON values
The npm package @jsonjoy.com/json-equal receives a total of 6,449 weekly downloads. As such, @jsonjoy.com/json-equal popularity was classified as popular.
We found that @jsonjoy.com/json-equal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.