Momoa is a general-purpose JSON utility toolkit for JavaScript and Rust. It includes a JSON parser, tokenizer, traverser, and printer, producing a consistent AST across the JavaScript and Rust packages.
Project status
- Actively maintained, GitHub shows an upstream push on 2026-09-03 and both momoa-js and momoa-rs have updates released within the last 1 to 2 days (2026-09-02).
- Apparent update cadence is currently steady and fast in the short term (multiple updates on 2026-09-02), with earlier bursts as well, for example momoa-js v3.3.11 on 2026-03-10 and v3.3.12 on 2026-07-06.
AI summary generated
Recent updates
momoa-rs-v3.2.6
momoa-rs v3.2.6 is a small release focused on release artifact provenance. It updates how the package is published, with no runtime/API changes described in the notes.
momoa-js-v3.3.13
momoa-js v3.3.13 is primarily a packaging/publishing change. The release notes say the artifact is now published with provenance metadata.
momoa-js-v3.3.12
momoa-js v3.3.12 includes a targeted parsing fix so that empty (and whitespace-only) input no longer crashes, and instead results in an UnexpectedEOF error. The diff also shows build and dependency maintenance work (CI action upgrades, Node version updates in release automation, and lockfile dependency bumps) that is not covered in the release notes.
momoa-js-v3.3.11
momoa-js v3.3.11 includes a fix in `evaluate()` to handle object member keys more safely, specifically for `__proto__` keys. The release notes document only this change, but the actual diff also includes test updates and multiple dependency lockfile changes (JS and Rust) that were not mentioned.
Securitymomoa-js-v3.3.10
v3.3.10 primarily updates TypeScript typings by adding back the missing `LocationRange` type export, with matching type assertions in tests. The code diff also updates release tooling in the GitHub Actions workflow and refreshes the npm lockfile with significantly newer `@rollup/*` versions.
momoa-rs-v3.2.5
momoa-rs v3.2.5 primarily updates the Rust dependency stack and fixes a small documentation related inconsistency. No breaking API or behavior changes are mentioned in the release notes.
momoa-js-v3.3.9
momoa-js v3.3.9 updates the parser so the Document node's `loc.end` and range calculations are consistent with the end of the full input text, including trailing whitespace. The release notes only mention this trailing whitespace location fix, but the code diff shows additional related location handling changes and some build/test and dependency maintenance.
momoa-js-v3.3.8
Release v3.3.8 is described as a TypeScript type compatibility fix for CommonJS consumers. The code diff shows changes that expand the type-test coverage to CommonJS, and adjusts the build pipeline to generate/update .d.cts type references for CommonJS-style resolution.
momoa-rs-v3.2.4
momoa-rs v3.2.4 is a patch release that primarily updates key Rust dependencies. The release notes list dependency bumps for serde, thiserror, and wasm-bindgen, grouped under Bug Fixes.
momoa-js-v3.3.7
momoa-js v3.3.7 is a small release focused on TypeScript compatibility, described as a types simplification bug fix. The code diff, however, shows several packaging and build pipeline changes around type declarations and exports, beyond what the release notes explicitly call out.
momoa-js-v3.3.6
v3.3.6 is primarily a TypeScript typing update. It adjusts the declared option shapes so that optional arguments for parse() and tokenize() are correctly typed.
momoa-js-v3.3.5
momoa-js v3.3.5 focuses on fixing how JSON5 identifiers handle Unicode escape sequences. The release notes mention two bug fixes: supporting uppercase hex digits in \\uXXXX sequences and validating identifiers that contain Unicode escapes.