deserialization

msgspec

+8

A fast serialization and validation library, with builtin support for JSON, MessagePack, YAML, and TOML

ijl/orjson

+7

Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy

foxglove/mcap

+3

MCAP is a modular, performant, and serialization-agnostic container file format, useful for pub/sub and robotics applications.

quick-xml

+3

Rust high performance xml reader and writer

ibireme/yyjson

+3

The fastest JSON library in C

facet-rs/facet

+2

Rust reflection, serialization, deserialization, pretty printing, etc. — the last proc macro you should need

cista

+2

Cista is a simple, high-performance, zero-copy C++ serialization & reflection library.

cattrs

+1

Composable custom class converters for attrs, dataclasses and friends.

fastjson-jsontype-rce-lab

+1

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.