
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
yaml-effect
Advanced tools
A pure Effect-based YAML 1.2 parser, stringifier, and toolkit for TypeScript. Zero runtime dependencies beyond Effect — no wrappers, no ports, just a clean-room YAML 1.2 implementation designed for the Effect ecosystem.
If you just need to parse YAML into a JavaScript object, use yaml. It is depended upon by 13,000+ packages, is battle-tested, and covers the full YAML 1.2 specification.
This library is for Effect-based programs that need deeper introspection and manipulation of YAML documents: typed parse errors you can catchTag, Schema pipelines that validate YAML strings into domain types, AST and CST access, non-destructive formatting and path-based modification, semantic equality comparisons, and SAX-style visitor streams that are composable in Effect pipelines.
yaml-effect passes 100% of the official yaml-test-suite (1226 of 1226 assertions). Every assertion in the suite is exercised, with no skipped tests and no expected failures, across all four assertion families:
parse(stringify(parse(x))) === parse(x))This reflects YAML 1.2 spec compliance as exercised by the yaml-test-suite. It is not a formal certification, and "spec-correct" should not be read as "production hardened" — see the maturity note below.
yaml-effect is pre-1.0. While the library is spec-correct against the yaml-test-suite, a 1.0.0 release is intentionally being deferred. Expect the following before stabilization:
npm install yaml-effect effect
Peer dependency:
effect(>= 3.x) must be installed alongsideyaml-effect.
import { Effect } from "effect";
import { parse, stringify } from "yaml-effect";
const program = Effect.gen(function* () {
const value = yield* parse("name: Alice\nage: 30");
console.log(value); // { name: "Alice", age: 30 }
const yaml = yield* stringify({ greeting: "hello", count: 42 });
console.log(yaml); // "greeting: hello\ncount: 42\n"
});
Effect.runSync(program);
For API reference, configuration options, and advanced usage, see docs.
FAQs
A pure Effect-based YAML 1.2 parser and stringifier for TypeScript.
We found that yaml-effect demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.