JSONPath Plus is a JavaScript/Node.js library for analyzing, transforming, and selectively extracting data from JSON documents (and JavaScript objects) using JSONPath expressions. It expands the original JSONPath specification with additional operators, type selectors, escaping options, and the ability to return meta-information like paths, pointers, and parent details. The project appears to be a fork of JSONPath and is not currently actively maintained.
Project status
- The repository appears actively maintained, with recent GitHub activity and ongoing library updates in 2026 (most recently v10.4.1 on 2026-06-25, and an upstream push on 2026-07-02 relative to 2026-08-12).
- Update cadence looks intermittent but alive: v10.4.1 in 2026-06, v10.4.0 in 2026-02, then the next cited update is v10.3.0 in 2025-02, suggesting bursts of updates rather than a steady monthly rhythm.
AI summary generated
Recent updates
v10.4.1
This release (v10.4.1) contains a behavioral fix in JSONPath slice handling, along with a number of build and dependency updates. The publisher release notes in the provided data are missing, so the documented intent cannot be verified against release notes.
v10.4.0
v10.4.0 adds support for the JavaScript void operator in JSONPath-plus evaluation, and includes a security fix to prevent RCE vectors involving lookupGetter and lookupSetter. The release also bumps dependencies (qs, lodash), updates documentation, and refreshes the project security policy.
SecurityFeaturesv10.3.0
v10.3.0 is primarily a security fix for the library's eval behavior, addressing an RCE vector involving non-string property names. It also updates the browser demo to support shareable links that encode the current query and sample.
SecurityFeaturesv7.2.0
v7.2.0 focuses on performance, reporting an optimization of the JSONPath walk method. It also mentions a “types” cleanup for the package exports, but the code diff shows additional internal refactors beyond those notes.
v6.0.1
Release v6.0.1 is a small patch release that primarily updates packaging-related paths and refreshes some development dependencies. The code diff shows changes to published entrypoint filenames (not just documentation) and corresponding updates to README/docs browser usage snippets.
v6.0.0
v6.0.0 switches the package to a true ESM setup, changing the published entrypoint file extensions to use .js for ESM builds and .cjs for UMD and CJS builds. It also updates developer tooling, including adding a lint script and changing the coverage toolchain.
BreakingFeaturesv5.0.7
Version 5.0.7 primarily updates the npm package export map. It ensures the package.json file is available via the package exports field, which improves compatibility with tooling that reads package metadata.
v5.1.0
v5.1.0 adds support for double-quoted bracket notation in JSONPath expressions, so paths like $["store"]["book"][*]["author"] are parsed correctly. The release also updates lint configuration and refreshes development dependencies, which results in regenerated bundled dist artifacts.
Featuresv5.0.6
v5.0.6 updates jsonpath-plus with a fix related to TypeScript typings around `static` members, plus general linting and developer tooling dependency refresh. The compiled runtime bundles show only comment-level lint changes, while the TypeScript declaration file reflects the meaningful API surface adjustment.
Breakingv5.0.5
Release v5.0.5 primarily fixes a cache-related bug in JSONPath.toPathArray where the cached path array could be corrupted if the returned array was modified by callers. The fix is implemented consistently across the source file and the distributed bundles, and a regression test is added to cover the issue.
v5.0.4
v5.0.4 is primarily a bug fix for JSONPath filter predicates, adjusting how falsey values are handled during evaluation. The release also includes documentation and linting updates, plus development dependency bumps.
Breaking