
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
ArkType is a runtime validation library that parses optimized validators from familiar, type-safe syntax.
It can be used to check external data like JSON payloads or forms at the boundaries of your code (similar to Zod).
See our docs site
We accept and encourage pull requests from outside ArkType. Planned work is tracked in this GitHub project.
Depending on your level of familiarity with type systems and TS generics, some parts of the codebase may be hard to jump into. That said, there's plenty of opportunities for more straightforward contributions. We'd generally recommend starting with one of these issues labeled external-contributor-friendly.
If you're planning on submitting a non-trivial fix or a new feature, please create an issue first so everyone's on the same page. The last thing we want is for you to spend time on a submission we're unable to merge.
When you're ready, check out our guide to get started!
This project is licensed under the terms of the MIT license.
We will not tolerate any form of disrespect toward members of our community. Please refer to our Code of Conduct and reach out to david@arktype.io immediately if you've seen or experienced an interaction that may violate these standards.
We've been working full-time on this project for multiple years and it means a lot to have the community behind us.
If the project has been useful to you and you are in a financial position to do so, please chip in via GitHub Sponsors.
Otherwise, consider sending me an email (david@arktype.io) or message me on Discord to let me know you're a fan of ArkType. Either would make my day!
| get-convex | inspatiallabs | sam-goodwin |
|---|---|---|
|
|
|
|
| tmm | mewhhaha | jahands | drwpwrs | Phalangers |
|---|---|---|---|---|
|
|
|
|
|
|
| WilliamConnatser | JameEnder | tylim88 | ||
|
|
|
|
AJV is a popular JSON schema validator that provides high-performance validation of JSON data against JSON Schema standards. Compared to arktype, AJV is more focused on JSON Schema compliance and offers extensive support for JSON Schema features, making it suitable for applications that require strict adherence to these standards.
Joi is a powerful schema description language and data validator for JavaScript. It allows developers to build complex validation logic with a simple and expressive API. While arktype focuses on type-safe schemas and runtime validation, Joi provides a more flexible and expressive syntax for defining validation rules, making it a good choice for applications that require complex validation logic.
Yup is a JavaScript schema builder for value parsing and validation. It is similar to Joi in terms of functionality but is often preferred for its smaller bundle size and tree-shakeable architecture. Compared to arktype, Yup offers a more declarative approach to schema building and validation, which can be more intuitive for developers familiar with functional programming paradigms.
FAQs
TypeScript's 1:1 validator, optimized from editor to runtime
The npm package arktype receives a total of 743,244 weekly downloads. As such, arktype popularity was classified as popular.
We found that arktype demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.