https://github.com/lxsmnsyc/seroval
Score: 28.795601955504086
Last synced: about 9 hours ago
JSON representation
Repository metadata:
Stringify JS values
- Host: GitHub
- URL: https://github.com/lxsmnsyc/seroval
- Owner: lxsmnsyc
- License: mit
- Created: 2023-02-05T17:52:28.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2026-10-29T08:07:59.000Z (7 days ago)
- Last Synced: 2026-10-29T09:23:44.946Z (7 days ago)
- Language: TypeScript
- Homepage: https://seroval.vercel.app
- Size: 5.25 MB
- Stars: 735
- Watchers: 4
- Forks: 18
- Open Issues: 11
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
-
Funding:
- Github: lxsmnsyc
Owner metadata:
- Name: Alexis H. Munsayac
- Login: lxsmnsyc
- Email: alexis.munsayac@gmail.com
- Kind: user
- Description: Speed determines the winner @solidjs
- Website: lxsmnsyc.now.sh
- Location: Philippines
- Twitter: lxsmnsyc
- Company: @solidjs
- Icon url: https://avatars.githubusercontent.com/u/4783372?u=d2703898b986d28943660920e134c8df47e676da&v=4
- Repositories: 290
- Last Synced at: 2026-11-04T01:55:24.164Z
- Profile URL: https://github.com/lxsmnsyc
GitHub Events
Total
- Create event: 19
- Delete event: 13
- Fork event: 4
- Issue comment event: 54
- Issues event: 18
- Member event: 1
- Pull request event: 35
- Pull request review comment event: 5
- Pull request review event: 19
- Push event: 82
- Release event: 2
- Watch event: 134
- Total: 386
Last Year
- Create event: 11
- Delete event: 11
- Fork event: 1
- Issue comment event: 25
- Issues event: 1
- Member event: 1
- Pull request event: 26
- Pull request review comment event: 2
- Pull request review event: 14
- Push event: 40
- Watch event: 21
- Total: 153
Committers metadata
Last synced: 2 days ago
Total Commits: 1,180
Total Committers: 20
Avg Commits per committer: 59.0
Development Distribution Score (DDS): 0.123
Commits in past year: 322
Committers in past year: 14
Avg Commits per committer in past year: 23.0
Development Distribution Score (DDS) in past year: 0.419
| Name | Commits | |
|---|---|---|
| Alexis H. Munsayac | a****c@g****m | 1035 |
| ladybluenotes | h****o@s****e | 63 |
| dependabot[bot] | 4****] | 47 |
| Claude | n****y@a****m | 5 |
| Sarah Gerrard | s****d@m****m | 4 |
| Yarchik | s****v@g****m | 4 |
| github-actions[bot] | 4****] | 4 |
| Iha Shin | m****e@x****v | 3 |
| Nesquiko | l****n@g****m | 3 |
| Caleb Cox | c****c | 2 |
| Atila Fassina | a****a@f****u | 1 |
| Ivan Medina | i****e@t****m | 1 |
| Jed | m****2@g****m | 1 |
| Lenz Weber-Tronic | l****c@a****m | 1 |
| Samual Norman | s****n@g****m | 1 |
| StepSecurity Bot | b****t@s****o | 1 |
| Théo LUDWIG | c****t@t****r | 1 |
| greymoth | 2****p | 1 |
| joseortiz9 | j****9@g****m | 1 |
| rxliuli | r****i@g****m | 1 |
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 43
Total pull requests: 259
Average time to close issues: 5 months
Average time to close pull requests: 6 days
Total issue authors: 25
Total pull request authors: 16
Average comments per issue: 2.14
Average comments per pull request: 1.88
Merged pull request: 182
Bot issues: 0
Bot pull requests: 116
Past year issues: 12
Past year pull requests: 218
Past year average time to close issues: 2 months
Past year average time to close pull requests: 6 days
Past year issue authors: 10
Past year pull request authors: 11
Past year average comments per issue: 2.33
Past year average comments per pull request: 2.2
Past year merged pull request: 143
Past year bot issues: 0
Past year bot pull requests: 116
Top Issue Authors
- lxsmnsyc (15)
- XiNiHa (2)
- AlexErrant (2)
- aretrace (2)
- samualtnorman (2)
- bgonp (1)
- yume-chan (1)
- patdx (1)
- ducan-ne (1)
- aleclarson (1)
- yinonburgansky (1)
- ryoid (1)
- DanqingLuan (1)
- gerbenvandijk (1)
- joseortiz9 (1)
Top Pull Request Authors
- dependabot[bot] (111)
- lxsmnsyc (66)
- LadyBluenotes (58)
- github-actions[bot] (5)
- spokodev (4)
- XiNiHa (2)
- ivandevp (2)
- rxliuli (2)
- joseortiz9 (2)
- theoludwig (1)
- phryneas (1)
- canac (1)
- greymoth-jp (1)
- samualtnorman (1)
- step-security-bot (1)
Top Issue Labels
Top Pull Request Labels
- dependencies (111)
- javascript (74)
- github_actions (37)
Package metadata
- Total packages: 9
-
Total downloads:
- npm: 209,089,611 last-month
- Total docker downloads: 5,692,859
- Total dependent packages: 8 (may contain duplicates)
- Total dependent repositories: 1,628 (may contain duplicates)
- Total versions: 299
- Total maintainers: 3
- Total advisories: 13
npmjs.org: seroval
Stringify JS values
- Homepage: https://seroval.vercel.app
- Licenses: MIT
- Latest release: 1.7.7 (published 2 days ago)
- Last Synced: 2026-11-03T12:55:04.519Z (1 day ago)
- Versions: 100
- Dependent Packages: 8
- Dependent Repositories: 1,628
- Downloads: 105,476,131 Last month
- Docker Downloads: 653,416
-
Rankings:
- Downloads: 0.385%
- Dependent repos count: 0.529%
- Docker downloads count: 1.373%
- Average: 3.853%
- Dependent packages count: 4.383%
- Stargazers count: 4.498%
- Forks count: 11.953%
- Maintainers (2)
-
Advisories:
- Seroval: Code injection through a typed array's own constructor property
- Seroval: Script injection through RegExp sources in serialized output
- Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)
- Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
- Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
- Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)
- Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization
- seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization
- Seroval affected by Denial of Service via Deeply Nested Objects
- Seroval affected by Denial of Service via Array serialization
- seroval affected by Denial of Service via RegExp serialization
- seroval Affected by Remote Code Execution via JSON Deserialization
- seroval Affected by Prototype Pollution via JSON Deserialization
proxy.golang.org: github.com/lxsmnsyc/seroval
- Homepage:
- Documentation: https://pkg.go.dev/github.com/lxsmnsyc/seroval#section-documentation
- Licenses: mit
- Latest release: v1.5.5 (published 4 months ago)
- Last Synced: 2026-11-03T07:33:14.629Z (1 day ago)
- Versions: 73
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.811%
- Average: 4.973%
- Dependent repos count: 5.135%
npmjs.org: @seroval/transport
Send seroval streams over fetch and other byte streams
- Homepage: https://seroval.vercel.app/docs/transport
- Licenses: MIT
- Latest release: 0.0.1-stage (published 7 days ago)
- Last Synced: 2026-11-03T08:24:54.388Z (1 day ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 181 Last month
-
Rankings:
- Dependent repos count: 20.174%
- Average: 24.629%
- Dependent packages count: 29.084%
- Maintainers (1)
repo1.maven.org: org.webjars.npm:seroval-plugins
WebJar for seroval-plugins
- Homepage: https://www.webjars.org
- Documentation: https://appdoc.app/artifact/org.webjars.npm/seroval-plugins/
- Licenses: MIT
- Latest release: 1.2.1 (published over 1 year ago)
- Last Synced: 2026-11-03T07:34:39.393Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Stargazers count: 15.565%
- Dependent repos count: 25.702%
- Average: 28.069%
- Forks count: 34.265%
- Dependent packages count: 36.745%
npmjs.org: @baton-ai/seroval-plugins
Stringify JS values
- Homepage: https://github.com/lxsmnsyc/seroval/tree/main/packages/plugins
- Licenses: MIT
- Latest release: 1.3.3 (published about 1 year ago)
- Last Synced: 2026-11-03T07:33:13.379Z (1 day ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 24 Last month
-
Rankings:
- Dependent repos count: 24.008%
- Average: 29.321%
- Dependent packages count: 34.635%
- Maintainers (1)
repo1.maven.org: org.webjars.npm:seroval
WebJar for seroval
- Homepage: https://www.webjars.org
- Documentation: https://appdoc.app/artifact/org.webjars.npm/seroval/
- Licenses: MIT
- Latest release: 1.2.1 (published over 1 year ago)
- Last Synced: 2026-11-03T07:56:47.050Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 25.702%
- Average: 31.223%
- Dependent packages count: 36.745%
repo1.maven.org: org.mvnpm:seroval-plugins
Stringify JS values
- Homepage: https://seroval.vercel.app/docs/using-plugins
- Documentation: https://appdoc.app/artifact/org.mvnpm/seroval-plugins/
- Licenses: MIT
- Latest release: 1.7.7 (published 1 day ago)
- Last Synced: 2026-11-04T06:29:22.163Z (about 19 hours ago)
- Versions: 31
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 34.612%
- Average: 42.051%
- Dependent packages count: 49.49%
repo1.maven.org: org.mvnpm:seroval
Stringify JS values
- Homepage: https://seroval.vercel.app
- Documentation: https://appdoc.app/artifact/org.mvnpm/seroval/
- Licenses: MIT
- Latest release: 1.7.6 (published 4 days ago)
- Last Synced: 2026-11-03T12:31:23.266Z (1 day ago)
- Versions: 42
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 34.612%
- Average: 42.051%
- Dependent packages count: 49.49%
npmjs.org: seroval-plugins
Stringify JS values
- Homepage: https://seroval.vercel.app/docs/using-plugins
- Licenses: MIT
- Latest release: 1.7.7 (published 2 days ago)
- Last Synced: 2026-11-02T13:37:32.632Z (2 days ago)
- Versions: 47
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 103,613,275 Last month
- Docker Downloads: 5,039,443
-
Rankings:
- Dependent repos count: 36.176%
- Average: 44.011%
- Dependent packages count: 51.846%
- Maintainers (1)
Dependencies
package.json
npm
- eslint ^8.33.0 development
- eslint-config-lxsmnsyc ^0.4.8 development
- lerna ^6.4.1 development
- typescript ^4.9.5 development
packages/seroval/package.json
npm
- @types/node ^18.11.18 development
- eslint ^8.32.0 development
- eslint-config-lxsmnsyc ^0.4.8 development
- pridepack 2.4.0 development
- tslib ^2.4.1 development
- typescript ^4.9.4 development
- vitest ^0.28.1 development
pnpm-lock.yaml
npm
- 908 dependencies
.github/workflows/main.yml
actions
- actions/checkout v3 composite
- actions/setup-node v3 composite
- pnpm/action-setup v2.2.2 composite
benchmark/package.json
npm
- @types/node ^18.15.3 development
- esbuild ^0.17.11 development
- eslint ^8.49.0 development
- eslint-config-lxsmnsyc ^0.6.5 development
- tslib ^2.5.0 development
- typescript ^4.9.5 development
- benny ^3.7.1
- devalue ^4.3.0
- flatted ^3.2.7
- next-json ^0.2.2
- o-son ^1.0.1
- serialize-javascript ^6.0.1
- seroval workspace:^0.10.1
- superjson ^1.12.2
- tosource 2.0.0-alpha.3
- warp10 ^2.1.0
.github/workflows/scorecard.yml
actions
- actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
- actions/upload-artifact 4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 composite
- github/codeql-action/upload-sarif v3 composite
- ossf/scorecard-action f49aabe0b5af0936a0987cfb85d86b75731b0186 composite
packages/plugins/package.json
npm
- @types/node ^24.10.0 development
- @vitest/ui ^4.0.6 development
- esbuild ^0.28.1 development
- seroval 1.6.1 development
- tsdown ^0.22.14 development
- tslib ^2.8.1 development
- typescript ^7.0.2 development
- vitest ^4.0.6 development
pnpm-workspace.yaml
npm
.github/workflows/codeql.yml
actions
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- github/codeql-action/analyze 5595ccaf912efad79be6eef63a5619ff05969be3 composite
- github/codeql-action/init 5595ccaf912efad79be6eef63a5619ff05969be3 composite
- step-security/harden-runner b09bb98e06d4d774595224525879c09bc6e98c40 composite
.github/workflows/benchmarks.yml
actions
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
- actions/upload-artifact ea165f8d65b6e75b540449e92b4886f43607fa02 composite
- pnpm/action-setup 0977fd99725f1db4007ccb2928dbb4e90d06cc86 composite
- step-security/harden-runner 05e31511f85b41b11d1cf0ef85d0992719546e2c composite
.github/workflows/benchmark-publish.yml
actions
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- actions/deploy-pages d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e composite
- actions/download-artifact d3f86a106a0bac45b974a628896c90dbdf5c8093 composite
- actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
- actions/upload-pages-artifact 56afc609e74202658d3ffba0e8f6dda462b719fa composite
- step-security/harden-runner 05e31511f85b41b11d1cf0ef85d0992719546e2c composite