The aeson vulnerability has been fixed in aeson-2.0.1.0

• github

  0 394 0.0 Haskell

  The github API for Haskell (by haskell-github)

  

  still works. In my experience so far, you only need to worry if you define your own combinators, e.g. like in https://github.com/phadej/github/commit/dd3dfbccaf4de4c3095b52fefb52c6b3c961a8f8

• aeson

  0 1,216 7.2 Haskell

  A fast Haskell JSON library

  

  Ah, I see you are working on this already, thank you: https://github.com/haskell/aeson/pull/883

• Onboard AI

  getonboard.dev

  sponsored

  Learn any GitHub repo in 59 seconds. Onboard AI learns any GitHub repo in minutes and lets you chat with it to locate functionality, understand different parts, and generate new code. Use it for free at www.getonboard.dev.

  

• libjwt-typed

  0 35 0.0 HTML

  A Haskell implementation of JSON Web Token (JWT)

  I benchmarked my jose library (using the benchmark suite from https://github.com/marcin-rzeznicki/libjwt-typed, which uses criterion); the JSON objects involved are small (< 8 members) and the performance difference is negligible - perhaps slightly faster (don't have to allocate a vector of hash buckets, most of which are unused). I haven't benchmarked performance with huge numbers of members but it's O(1) [amortised, degrading to O(n) for pathological inputs] -> O(log n), so I would expect a small performance decrease for objects with >> 8 members.

Suggest a related project