toon-parser 2.2.0 → 2.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -2
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -14,7 +14,13 @@ Safe JSON ⇆ TOON encoder/decoder with strict validation and prototype-pollutio
|
|
|
14
14
|
npm install toon-parser
|
|
15
15
|
```
|
|
16
16
|
|
|
17
|
-
Note: this package supports both ESM and CommonJS consumers (CJS builds are available as `dist/index.cjs`). The package requires Node >=
|
|
17
|
+
Note: this package supports both ESM and CommonJS consumers (CJS builds are available as `dist/index.cjs`). The package requires Node >= 20 per `engines` in `package.json`.
|
|
18
|
+
|
|
19
|
+
## New in 2.2.0
|
|
20
|
+
- **Security**: Fixed 8 dependency vulnerabilities (1 critical `fast-xml-parser` with 6 CVEs, 5 high, 2 moderate).
|
|
21
|
+
- **Dependencies**: Updated all dependencies to latest versions (vitest 4, TypeScript 5.9, fast-xml-parser 5.5.9).
|
|
22
|
+
- **Node.js**: Minimum version bumped to Node 20 (Node 18 reached EOL April 2025).
|
|
23
|
+
- **Build**: `esbuild` is now an explicit dependency; test files excluded from published tarball.
|
|
18
24
|
|
|
19
25
|
## New in 2.1.0
|
|
20
26
|
- **HTML/CSV/Log/URL Support**: Dedicated parsers for common formats to leverage Toon's structure.
|
|
@@ -204,4 +210,4 @@ try {
|
|
|
204
210
|
|
|
205
211
|
## Project status
|
|
206
212
|
|
|
207
|
-
This library targets TOON spec v2.1 core behaviors commonly needed for JSON round-trips. It prioritizes correctness and safety over permissiveness; loosen validation via `strict: false` only when you fully trust the input source
|
|
213
|
+
This library targets TOON spec v2.1 core behaviors commonly needed for JSON round-trips. It prioritizes correctness and safety over permissiveness; loosen validation via `strict: false` only when you fully trust the input source.
|