[Feature] Consider removing easyjson dependency due to sanction concerns #326

Activity

1. pjfanning

   added

   featureNew featureNew feature

   on May 6, 2025
2. imbajin commented on May 6, 2025

   

   imbajin

   on May 6, 2025

   Member

   More actions

   Feature Description (功能描述)

   Security Researchers Warn a Widely Used Open Source Tool Poses a 'Persistent' Risk to the US

   wired.com/story/easyjson-open-source-vk-ties

   Thanks for the reminder, are there any examples of simple replacements or project PR references?
3. imbajin

   added the

   Task

   issue type on May 6, 2025
4. imbajin

   added

   help wantedExtra attention is neededExtra attention is needed

   apache

   security

   and removed

   featureNew featureNew feature

   on May 6, 2025
5. pjfanning commented on May 6, 2025

   

   pjfanning

   on May 6, 2025

   MemberAuthor

   More actions

   @imbajin thanks for the quick response but I'm just passing on the bad news about the lib.

   Googling, I found

   • https://github.com/orsinium-labs/jsony
   • https://github.com/buger/jsonparser
   • Go has its own stdlib support for JSON if performance is not your main concern

   ❤️React with ❤️1Reacted by imbajin
6. imbajin

   added a parent issue on May 9, 2025

   • [Summary] Vermeer/Computer Task For Newcomers #325