Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Serialisation Library for JavaScript that respects object aliases,
copes with cycles in the object graph, understands undefined
, and
can cope with arrays that have arbitrary properties.
Can be used either client-side or in NodeJS.
var x = {};
var y = {a: x, b: x};
If you take the above and then do JSON.parse(JSON.stringify(y))
then
you will lose the alias to x
: what you'll get back will be {a: {}, b: {}}
.
If you instead do Cereal.parse(Cereal.stringify(y))
then you'll get
back the correct object shape, with both a
and b
pointing to the
same object.
JSON can't cope with cyclical data structures. Cereal can.
var x = {};
x.x = x;
JSON will blow up if you try to stringify(x)
. Cereal will work
correctly.
JSON can't represent undefined
. Cereal can.
var x = {a: undefined};
JSON.parse(JSON.stringify(x))
will yield {}
. Cereal will get it
right.
JSON thinks arrays can't have arbitrary properties, and will drop them. Cereal won't.
var x = [5];
x.foo = true;
JSON.parse(JSON.stringify(x))
will yield [5]
. Cereal will get it
right.
JSON invokes toJSON
on an object before encoding it. Analogously to
this, Cereal invokes a cerealise
function if it exists and encodes
what is returned from that.
Note that Cereal first rewrites the object structure to something without loops or aliases (but from which the loops and aliases can be reconstructed) and then it just uses normal JSON encoding on the result, and vice-versa.
As a result, Cereal will ignore everything that JSON would ignore too. Thus as normal, you lose functions, prototypes etc etc.
FAQs
Serialisation library for JavaScript that understands object graphs
The npm package cereal receives a total of 19 weekly downloads. As such, cereal popularity was classified as not popular.
We found that cereal demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.