
Security News
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.
json-streams
Advanced tools
Streamed parser and stringifier that act like writable and readable streams
You can build a ParseString like so:
var json = require('json-streams');
var p = json.createParseStream();
p is an instance of the json.ParseStream class. json.ParseStream is a
writable stream which means you can write or pipe data to it.
var net = require('net');
var c = net.createConnection(1337, 'example.com');
c.pipe(p);
At the moment, ParseStream supports only one output event which is the
'end' event. The listener gets called with the fully parsed object as
argument. No data is buffered during the parsing so you can load very big
JSON files. Support for finer events is on the TODO list as well as the
possibility to ignore some objects that are not needed and should be
"garbage collected"
p.on('end', function(object) {
// do something with your object
})
StringifyStream is only a very thin wrapper around
json-streamify. In fact, It is so
thin that everything is still synchronous. Wrapping this correctly or
rewriting some parts is at top priority on the TODO list.
StringifyStream so that it can pause when stringifying an object
and continue later.ParseStream. I'm
thinking of somekind of subscription pattern where one could register for
o.member, o.member.arrayMember[n] or o.member.arrayMember[3]. However
this is very non-trivial and should be somewhat retrocompatible with the
current behaviour.You are very welcome to file bugs on the github tracker and send patches or pull requests.
... here be license ...
FAQs
Streams for parsing and stringifying big JSON objects
The npm package json-streams receives a total of 4 weekly downloads. As such, json-streams popularity was classified as not popular.
We found that json-streams demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.

Security News
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.