https://github.com/sveltejs/devalue
Score: 29.70467978960628
Last synced: about 2 hours ago
JSON representation
Repository metadata:
Gets the job done when JSON.stringify can't
- Host: GitHub
- URL: https://github.com/sveltejs/devalue
- Owner: sveltejs
- License: mit
- Created: 2018-03-10T21:53:48.000Z (over 8 years ago)
- Default Branch: main
- Last Pushed: 2026-10-27T17:02:34.000Z (8 days ago)
- Last Synced: 2026-10-29T19:24:37.638Z (6 days ago)
- Language: JavaScript
- Homepage: https://svelte.dev/repl/138d70def7a748ce9eda736ef1c71239
- Size: 1010 KB
- Stars: 2,812
- Watchers: 13
- Forks: 103
- Open Issues: 21
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Owner metadata:
- Name: Svelte
- Login: sveltejs
- Email:
- Kind: organization
- Description: Web development for the rest of us
- Website: https://svelte.dev
- Location: pkg.devDependencies
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/23617963?v=4
- Repositories: 88
- Last Synced at: 2026-10-31T11:49:24.606Z
- Profile URL: https://github.com/sveltejs
GitHub Events
Total
- Commit comment event: 1
- Create event: 21
- Delete event: 14
- Fork event: 9
- Issue comment event: 17
- Issues event: 5
- Pull request event: 23
- Pull request review comment event: 4
- Pull request review event: 15
- Push event: 44
- Release event: 6
- Watch event: 132
- Total: 291
Last Year
- Create event: 12
- Delete event: 4
- Fork event: 7
- Issue comment event: 3
- Issues event: 1
- Pull request event: 7
- Pull request review comment event: 4
- Pull request review event: 10
- Push event: 32
- Release event: 2
- Watch event: 39
- Total: 121
Committers metadata
Last synced: 1 day ago
Total Commits: 256
Total Committers: 38
Avg Commits per committer: 6.737
Development Distribution Score (DDS): 0.473
Commits in past year: 89
Committers in past year: 22
Avg Commits per committer in past year: 4.045
Development Distribution Score (DDS) in past year: 0.719
| Name | Commits | |
|---|---|---|
| Rich Harris | h****o@r****v | 135 |
| github-actions[bot] | 4****] | 27 |
| Elliott Johnson | h****o@e****v | 27 |
| Maurício Kishi | m****i | 9 |
| gtmnayan | g****n@g****m | 7 |
| Rich Harris | g****t@r****v | 5 |
| Nathan Rajlich | n****@n****o | 4 |
| Loris Sigrist | s****t@h****o | 3 |
| Ivan Hofer | i****r@o****m | 3 |
| Daniel Roe | d****l@r****v | 3 |
| pooya parsa | p****a@p****r | 3 |
| Gautier Ben Aïm | 4****n | 2 |
| spokodev | s****v@g****m | 2 |
| Conduitry | g****t@c****e | 2 |
| Alex | 1****0 | 1 |
| Alexander Kireyev | a****a@g****m | 1 |
| Andrew Haines | a****w@h****z | 1 |
| Arpit Jain | 3****9 | 1 |
| ComputerGuy | 6****S | 1 |
| greymoth | m****7@i****m | 1 |
| dependabot[bot] | 4****] | 1 |
| Shoichi Kaji | s****i@c****g | 1 |
| Samarth Chitgopekar | 6****c | 1 |
| Pooya Parsa | p****a@p****o | 1 |
| Olle Kelderman | o****n@g****m | 1 |
| Nicolò Ribaudo | h****o@n****v | 1 |
| Nic Polumeyv | n****m@o****m | 1 |
| Mochammad Fadhlan Al-Ghiffari | 1****G | 1 |
| Maxim Gagiev | m****v@g****m | 1 |
| Leonidas | 3****z | 1 |
| and 8 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 8
Total pull requests: 93
Average time to close issues: about 1 month
Average time to close pull requests: 14 days
Total issue authors: 8
Total pull request authors: 28
Average comments per issue: 0.25
Average comments per pull request: 1.28
Merged pull request: 68
Bot issues: 0
Bot pull requests: 21
Past year issues: 7
Past year pull requests: 78
Past year average time to close issues: about 1 month
Past year average time to close pull requests: 9 days
Past year issue authors: 7
Past year pull request authors: 26
Past year average comments per issue: 0.29
Past year average comments per pull request: 1.37
Past year merged pull request: 56
Past year bot issues: 0
Past year bot pull requests: 16
Top Issue Authors
- DRMacIver (1)
- 7nik (1)
- gyzerok (1)
- RomanValov (1)
- lucacasonato (1)
- Gerschtli (1)
- Sanqui (1)
- leo-gan (1)
Top Pull Request Authors
- elliott-with-the-longest-name-on-github (23)
- github-actions[bot] (20)
- Rich-Harris (14)
- mrkishi (4)
- spokodev (4)
- Nic-Polumeyv (2)
- danielroe (2)
- NotAFlightRisk (2)
- Ocean-OS (2)
- TooTallNate (2)
- pi0 (1)
- dependabot[bot] (1)
- youdie006 (1)
- Likio3000 (1)
- feritcemkahraman (1)
Top Issue Labels
Top Pull Request Labels
- javascript (1)
- dependencies (1)
Package metadata
- Total packages: 5
-
Total downloads:
- npm: 70,033,693 last-month
- Total docker downloads: 3,796,879
- Total dependent packages: 247 (may contain duplicates)
- Total dependent repositories: 52,279 (may contain duplicates)
- Total versions: 130
- Total maintainers: 3
- Total advisories: 16
npmjs.org: devalue
Gets the job done when JSON.stringify can't
- Homepage: https://github.com/sveltejs/devalue#readme
- Licenses: MIT
- Latest release: 6.0.3 (published 22 days ago)
- Last Synced: 2026-11-03T13:46:05.229Z (1 day ago)
- Versions: 55
- Dependent Packages: 247
- Dependent Repositories: 52,279
- Downloads: 70,033,668 Last month
- Docker Downloads: 3,796,879
-
Rankings:
- Dependent repos count: 0.142%
- Downloads: 0.161%
- Dependent packages count: 0.227%
- Docker downloads count: 0.391%
- Average: 1.192%
- Stargazers count: 2.086%
- Forks count: 4.145%
- Maintainers (2)
-
Advisories:
- devalue: `stringify`/`uneval` serialize shared memory
- devalue: Residual sparse-array CPU amplification in uneval
- devalue: Repeated primitive strings cause quadratic expansion in uneval
- devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated
- devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation
- devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise
- devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion
- Svelte devalue: DoS via malformed input
- Svelte devalue: DoS via sparse array deserialization
- Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties
- devalue has prototype pollution in devalue.parse and devalue.unflatten
- devalue affected by CPU and memory amplification from sparse arrays
- devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed
- devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse
- Devalue is vulnerable to denial of service due to memory exhaustion in devalue.parse
- devalue prototype pollution vulnerability
proxy.golang.org: github.com/sveltejs/devalue
- Homepage:
- Documentation: https://pkg.go.dev/github.com/sveltejs/devalue#section-documentation
- Licenses: mit
- Latest release: v6.0.3+incompatible (published 22 days ago)
- Last Synced: 2026-11-03T05:47:22.615Z (1 day ago)
- Versions: 54
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.702%
- Average: 4.86%
- Dependent repos count: 5.018%
npmjs.org: devalue-learn
Gets the job done when JSON.stringify can't
- Homepage: https://github.com/sveltejs/devalue#readme
- Licenses: MIT
- Latest release: 5.3.2 (published about 1 year ago)
- Last Synced: 2026-11-03T08:01:42.803Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 25 Last month
-
Rankings:
- Stargazers count: 1.486%
- Forks count: 2.954%
- Average: 15.574%
- Dependent repos count: 23.688%
- Dependent packages count: 34.17%
- Maintainers (1)
repo1.maven.org: org.mvnpm:devalue
Gets the job done when JSON.stringify can't
- Homepage: https://github.com/sveltejs/devalue#readme
- Documentation: https://appdoc.app/artifact/org.mvnpm/devalue/
- Licenses: MIT
- Latest release: 6.0.3 (published 20 days ago)
- Last Synced: 2026-11-03T05:40:14.336Z (1 day ago)
- Versions: 19
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Stargazers count: 7.018%
- Forks count: 21.809%
- Average: 26.105%
- Dependent repos count: 31.112%
- Dependent packages count: 44.48%
repo1.maven.org: org.webjars.npm:devalue
WebJar for devalue
- Homepage: https://www.webjars.org
- Documentation: https://appdoc.app/artifact/org.webjars.npm/devalue/
- Licenses: MIT
- Latest release: 5.6.4 (published 8 months ago)
- Last Synced: 2026-11-03T05:40:14.391Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 27.851%
- Average: 33.834%
- Dependent packages count: 39.818%
Dependencies
- typescript ^3.1.3 development
- uvu ^0.5.6 development
- 219 dependencies
- actions/checkout 34e114876b0b11c390a56381ad16ebd13914f8d5 composite
- actions/setup-node 49933ea5288caeca8642d1e84afbd3f7d6820020 composite
- pnpm/action-setup b906affcce14559ad1aafd4ab0e942779e9f58b1 composite
- actions/checkout 34e114876b0b11c390a56381ad16ebd13914f8d5 composite
- actions/setup-node 49933ea5288caeca8642d1e84afbd3f7d6820020 composite
- changesets/action 63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b composite
- pnpm/action-setup b906affcce14559ad1aafd4ab0e942779e9f58b1 composite