Jsondiffpatch

Overview

From the repository's own README, as read at the audited commit.

<p align="center">  <img src="demos/html-demo/logo.svg" width="48px" align="center" alt="jsondiffpatch logo" />  <h1 align="center">jsondiffpatch</h1>  <p align="center">    <a href="https://jsondiffpatch.com">jsondiffpatch.com</a>    <br/>    Diff & patch JavaScript objects  </p></p><!--- badges --><p align="center">  <a href="https://github.com/benjamine/jsondiffpatch/actions?query=branch%3Amaster"><img src="https://github.com/benjamine/jsondiffpatch/actions/workflows/CI.yml/badge.svg?event=push&branch=master" alt="JsonDiffPatch CI status" /></a>  <a href="https://twitter.com/beneidel" rel="nofollow"><img src="https://img.shields.io/badge/created%[email protected]" alt="Created by Benjamin Eidelman"></a>  <a href="https://opensource.org/licenses/MIT" rel="nofollow"><img src="https://img.shields.io/github/license/benjamine/jsondiffpatch" alt="License"></a>  <a href="https://www.npmjs.com/package/jsondiffpatch" rel="nofollow"><img src="https://img.shields.io/npm/dw/jsondiffpatch.svg" alt="npm"></a>  <a href="https://github.com/benjamine/jsondiffpatch" rel="nofollow"><img src="https://img.shields.io/github/stars/benjamine/jsondiffpatch" alt="stars"></a></p>---## **[Live Demo](https://jsondiffpatch.com)**- min+gzipped ~ 16KB- browser and server (ESM-only)- deep diff, use delta to patch- smart array diffing using [LCS](http://en.wikipedia.org/wiki/Longest_common_subsequence_problem), **_IMPORTANT NOTE:_** to match objects inside an array you must provide an `objectHash` function (this is how objects are matched, otherwise a dumb match by position is used). For more details, check [Array diff documentation](docs/arrays.md)- (optionally) text diffing of long strings powered by [google-diff-match-patch](http://code.google.com/p/google-diff-match-patch/) (diff at character level)- reverse a delta, unpatch (eg. revert object to its original state using a delta)- multiple output formats:  - pure JSON, low footprint [delta format](docs/deltas.md)  - <span style="backg

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude mcp add jsondiffpatch -- npx -y [email protected]

{
  "mcpServers": {
    "jsondiffpatch": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (1) 1 read · 0 write · 0 destructive

Details

Source

benjamine/jsondiffpatch

npm

jsondiffpatch@0.7.6

Transports

stdio

License

MIT

Stars

5,340 · pushed 121d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

none-observed

Network

declared (2 observation(s))

Shell

declared (2 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (12)

return yaml.load(data);

eval(s.innerHTML);

import type { Delta, Options } from "../../src/index.js";

import * as annotatedFormatter from "../../src/formatters/annotated.js";

import * as jsondiffpatch from "../../src/index.js";

import * as htmlFormatter from "../../src/formatters/html.js";

import * as jsondiffpatch from "../../src/index.js";

jsondiffpatch, typescript

json5, jsondiffpatch, esbuild, typescript

jsondiffpatch, typescript

@biomejs/biome, typescript

@dmsnell/diff-match-patch, @modelcontextprotocol/sdk, fast-xml-parser, js-yaml, json5, jsondiffpatch, smol-toml, zod

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 19ee573ece35 · full audit: observations/trust-audit/mcp-server/benjamine__jsondiffpatch.json · Report an issue or request a re-scan

Audit history

Also audited

Servers with a similar trust profile.

Questions