Gathering detailed insights and metrics for ajv
Gathering detailed insights and metrics for ajv
Gathering detailed insights and metrics for ajv
Gathering detailed insights and metrics for ajv
The fastest JSON schema Validator. Supports JSON Schema draft-04/06/07/2019-09/2020-12 and JSON Type Definition (RFC8927)
npm install ajv
97.5
Supply Chain
100
Quality
81.7
Maintenance
100
Vulnerability
100
License
Module System
Min. Node Version
Typescript Support
Node Version
NPM Version
13,872 Stars
2,711 Commits
877 Forks
112 Watching
24 Branches
203 Contributors
Updated on 28 Nov 2024
Minified
Minified + Gzipped
TypeScript (97.87%)
JavaScript (1.68%)
Shell (0.45%)
Cumulative downloads
Total Downloads
Last day
-6.7%
22,879,671
Compared to previous day
Last week
1.8%
133,659,818
Compared to previous week
Last month
13.6%
542,874,375
Compared to previous month
Last year
15.2%
5,332,639,447
Compared to previous year
41
Â
The fastest JSON validator for Node.js and browser.
Supports JSON Schema draft-04/06/07/2019-09/2020-12 (draft-04 support requires ajv-draft-04 package) and JSON Type Definition RFC8927.
More than 100 people contributed to Ajv, and we would love to have you join the development. We welcome implementing new features that will benefit many users and ideas to improve our documentation.
Please review Contributing guidelines and Code components.
All documentation is available on the Ajv website.
Some useful site links:
Since I asked to support Ajv development 40 people and 6 organizations contributed via GitHub and OpenCollective - this support helped receiving the MOSS grant!
Your continuing support is very important - the funds will be used to develop and maintain Ajv once the next major version is released.
Please sponsor Ajv via:
Thank you.
Ajv generates code to turn JSON Schemas into super-fast validation functions that are efficient for v8 optimization.
Currently Ajv is the fastest and the most standard compliant validator according to these benchmarks:
Performance of different validators by json-schema-benchmark:
addSchema
or compiled to be available)type
keywordsTo install version 8:
npm install ajv
Try it in the Node.js REPL: https://runkit.com/npm/ajv
In JavaScript:
1// or ESM/TypeScript import 2import Ajv from "ajv" 3// Node.js require: 4const Ajv = require("ajv") 5 6const ajv = new Ajv() // options can be passed, e.g. {allErrors: true} 7 8const schema = { 9 type: "object", 10 properties: { 11 foo: {type: "integer"}, 12 bar: {type: "string"}, 13 }, 14 required: ["foo"], 15 additionalProperties: false, 16} 17 18const data = { 19 foo: 1, 20 bar: "abc", 21} 22 23const validate = ajv.compile(schema) 24const valid = validate(data) 25if (!valid) console.log(validate.errors)
Learn how to use Ajv and see more examples in the Guide: getting started
See https://github.com/ajv-validator/ajv/releases
Please note: Changes in version 8.0.0
Please review and follow the Code of conduct.
Please report any unacceptable behaviour to ajv.validator@gmail.com - it will be reviewed by the project team.
To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure. Please do NOT report security vulnerabilities via GitHub issues.
Ajv is a part of Tidelift subscription - it provides a centralised support to open-source software users, in addition to the support provided by software maintainers.
The latest stable version of the package.
Stable Version
1
5.6/10
Summary
Prototype Pollution in Ajv
Affected Versions
< 6.12.3
Patched Versions
6.12.3
Reason
no dangerous workflow patterns detected
Reason
security policy file detected
Details
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
Reason
Found 29/30 approved changesets -- score normalized to 9
Reason
1 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 4
Reason
badge detected: InProgress
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
Reason
project is not fuzzed
Details
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Score
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More