Packages

js-yaml

5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed

Upgrading js-yaml from 2.0.1 to 2.1.3

8 releases in betweenevery note read

Other targets from 2.0.1Clears its 5 advisories3.15.0Latest5.5.0
0
changes to make
1
advisory fixed
2
new
7
fixes

Security

4 advisories still affect 2.1.3

Upgrading to 3.15.0 clears them.

Fixes 1 advisory affecting 2.0.1

  • Close security issue in !!js/function constructor. Big thanks to @nealpoole for security audit.

    2.0.5

Release by release

  1. 2.1.3

    15 Oct 20131 fix
    • fixed

      Fix wrong loading of empty block scalars.

  2. 2.1.2

    6 Oct 20131 fix
    • fixed

      Fix unwanted line breaks in folded scalars.

  3. 2.1.1

    1 Oct 20132 fixes
    • fixed

      Dumper now respects deprecated booleans syntax from YAML 1.0/1.1

    • fixed

      Fixed reader bug in JSON-like sequences/mappings.

  4. 2.1.0

    5 Jun 20132 new · 1 fix
    • new

      Add standard YAML schemas: Failsafe (FAILSAFE_SCHEMA), JSON (JSON_SCHEMA) and Core (CORE_SCHEMA).

    • new

      Add skipInvalid dumper option.

    • fixed

      Bug fix: export NIL constant from the public interface.

  5. 2.0.4 – 2.0.52 releases, nothing new or fixed in the notes

  6. 2.0.3

    26 Feb 20131 fix
    • fixed

      Fixed dumping of empty arrays ans objects. ( and {} instead of null)

  7. 2.0.2

    15 Feb 20131 fix
    • fixed

      Fixed input validation: tabs are printable characters.

3 other lines we could not sort, mostly version bumps

  • Rename DEFAULT_SCHEMA to DEFAULT_FULL_SCHEMA and SAFE_SCHEMA to DEFAULT_SAFE_SCHEMA.

    2.1.0

  • Use safeLoad for require extension.

    2.1.0

  • Updated .npmignore to reduce package size

    2.0.4