js-yaml
npm
pkg:npm/js-yaml
17,810 Dependabot PRs
about 3 hours ago
14,271 repositories
325 repositories
Security Advisories
js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml
js-yaml: YAML merge-key chains can force quadratic CPU consumption
js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases
js-yaml has prototype pollution in merge (<<)
Recent PRs
Bump js-yaml from 4.2.0 to 4.3.0 in /packages/frontend in the npm_and_yarn group across 1 directory
skaut/poptavky #2836
deps(deps): bump the major group with 56 updates
SriKaratalapu/juice-shop-krishna #71
deps(deps): bump the major group with 56 updates
chore(deps): bump the npm-dependencies group with 120 updates
chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates
big-main/personal-security-checklist #2
chore(deps): bump js-yaml from 3.14.2 to 3.15.0 in /plugins/platforms/photon/sidecar in the npm_and_yarn group across 1 directory
chore(deps): bump the production-dependencies group across 1 directory with 25 updates
chore(deps): bump the production-dependencies group across 1 directory with 28 updates
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates
chore(deps): bump the npm-minor-patch group with 401 updates
build(deps): bump the production-dependencies group across 1 directory with 29 updates
build(deps): bump the npm_and_yarn group across 1 directory with 9 updates
deps(deps-dev): bump js-yaml from 4.1.1 to 4.3.0
chore(deps): bump js-yaml from 3.14.2 to 3.15.0
antonio-sessa/my-landing-page #74
Bump the npm_and_yarn group across 1 directory with 8 updates
Bump js-yaml from 3.14.2 to removed in the npm_and_yarn group across 1 directory
github/details-menu-element #91
chore(deps): bump js-yaml from 4.1.1 to 4.3.0 in /nlweb-template
cloudflare/templates #1063
chore(deps): bump the production-dependencies group with 27 updates
AtlanticDMS/change-journey-wiki #2
chore(deps): bump the production-dependencies group across 1 directory with 27 updates
HunGerry90/MonchisMagicKitchen #7
Bump the production-dependencies group across 1 directory with 27 updates
chore(deps): bump the production-dependencies group across 1 directory with 27 updates
Beatrice-Wakarima/DATA-SCIENCE-LEARNING-VAULT #7
chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates
build(deps): bump js-yaml from 5.2.0 to 5.2.1
wearemiew/yml-change-webhook-trigger #127
Bump the npm-dependencies group across 1 directory with 7 updates
gradle/develocity-actions #206
chore(deps): bump js-yaml from 3.13.1 to 3.15.0 in /test/cli/install/migration/yarn/yarn-cli-repo
alialobidm/bun #115
Bump js-yaml from 4.1.0 to 4.3.0
alialobidm/op-stack-bridge-example #19
chore(deps): bump the all-deps group across 1 directory with 8 updates
RichardRosenblat/elastic-resume-base #304
Bump js-yaml from 4.1.0 to 4.3.0
Scc33/BuddySQL #97
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0
and3rn3t/flipper #11
chore(deps-dev): bump js-yaml from 4.1.0 to 4.3.0
igorissen/angular-env-builder #3
Chore(deps-dev): Bump js-yaml from 4.2.0 to 5.2.0 in /extension
pixiebrix/agent-browser-shield #323
build(deps): bump js-yaml from 4.1.1 to 4.3.0 in /frontend
LCSOGthb/hub #27
Bump js-yaml from 3.13.1 to 3.15.0 in /samples/openapi3/client/petstore/typescript/tests/inversify
Dustin4444/openapi-generator #483
chore(deps): bump the npm-major group with 2 updates
giulio333/ClaudeLens #132
chore(deps): bump js-yaml from 4.3.0 to 5.2.1
septanteneuf/career-ops-custom #6
Bump the npm_and_yarn group across 1 directory with 4 updates
Bump the npm_and_yarn group across 1 directory with 7 updates
ThePlenkov/openai-to-abap-with-ai #1
chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates
Monferrina/vetreriamonferrina.com #225
Bump the npm_and_yarn group across 1 directory with 6 updates
chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates
Bump js-yaml from 4.1.0 to 4.3.0 in /admin
jeubank12/refitted #1830
build(deps): bump the npm_and_yarn group across 1 directory with 11 updates
guibranco/pull-request-ui #789
Bump js-yaml from 3.13.1 to 3.15.0 in /frontend
GetStream/stream-e2ee-chat #52
Package Details
| Name: | js-yaml |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/js-yaml |
| JSON API: | View JSON |
Security Advisories
Package Information
YAML 1.2 parser and serializer
| Repository: | https://github.com/nodeca/js-yaml |
| Homepage: | https://github.com/nodeca/js-yaml#readme |
| Latest Release: |
4.1.0
over 5 years ago |
| Dependent Repos: | 1,075,506 |
| Dependent Packages: | 20,789 |
| Downloads: | 510,155,139 |
| Ranking: | Top 0.0319% by dependent repos Top 0.0015% by downloads Top 0.0051% by dependent pkgs |