{"_id":"@brickhouse-tech/json-schema-lts","_rev":"8-5571f2f1807c2e9c4ad8c66da2862b44","name":"@brickhouse-tech/json-schema-lts","dist-tags":{"pre":"0.4.1-0","latest":"0.4.7"},"versions":{"0.4.1-0":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.1-0","keywords":["json","schema"],"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","_id":"@brickhouse-tech/json-schema-lts@0.4.1-0","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"homepage":"https://github.com/brickhouse-tech/json-schema#readme","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"dist":{"shasum":"470a0ab561f29dfcb28ec8dcea0d9d968c5d74d4","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.1-0.tgz","fileCount":5,"integrity":"sha512-SpjdRqMUK6xh0vMFQRBSe7gczD2EPCGZqWc++YRau31JeS3tWtIMcepfqxFd9733M+B9iNh7G0ScWueXyNRV+Q==","signatures":[{"sig":"MEUCIHx1F50/4msVkrHm4vporMbOVal35HumOduz8VKKMrU3AiEA5wu/Cg1xWnf5UqZjm8bw+BX9scnfMUIoySFfXgiW1eI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":27073},"main":"./lib/validate.js","gitHead":"78593f5462460030367d02857e3956561694f418","scripts":{"lint":"eslint lib/ test/","test":"vows --spec test/*.js"},"_npmUser":{"name":"nmccready","email":"nemtcan@gmail.com"},"repository":{"url":"git+https://github.com/brickhouse-tech/json-schema.git","type":"git"},"_npmVersion":"11.10.0","description":"JSON Schema validation and specifications","directories":{"lib":"./lib"},"_nodeVersion":"22.22.0","_hasShrinkwrap":false,"devDependencies":{"vows":"*","eslint":"^9.0.0","@eslint/js":"^9.0.0"},"_npmOperationalInternal":{"tmp":"tmp/json-schema-lts_0.4.1-0_1771359416043_0.20142491998887913","host":"s3://npm-registry-packages-npm-production"}},"0.4.1":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.1","keywords":["json","schema"],"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","_id":"@brickhouse-tech/json-schema-lts@0.4.1","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"homepage":"https://github.com/brickhouse-tech/json-schema#readme","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"dist":{"shasum":"35d341f7320d5b1c03b71a32a91e34033d7daca1","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.1.tgz","fileCount":5,"integrity":"sha512-WJ/OXqfkchqBe9Zl/Mg8CrDd/fAJ0i/elpJtDM6gzRQVVj8glsbq0tptZxlXx9A9Zh5slc1jvis0acmCPEpUGg==","signatures":[{"sig":"MEUCID5RYwhA6AgPzXxbirjdekTu+hmqg65yyr98LMxzkhZ5AiEAzNkDHDN3LKXC+jHYuk15uzai9jUT3JxyGgnx2+r2KVA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@brickhouse-tech%2fjson-schema-lts@0.4.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":27072},"main":"./lib/validate.js","gitHead":"81d9b5be911e426fc9a0befa0294024c45cd84f2","scripts":{"lint":"eslint lib/ test/","test":"vows --spec test/*.js"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:db09113d-a014-47cf-82e7-19c1f9d41b39"}},"repository":{"url":"git+https://github.com/brickhouse-tech/json-schema.git","type":"git"},"_npmVersion":"11.10.0","description":"JSON Schema validation and specifications","directories":{"lib":"./lib"},"_nodeVersion":"20.20.0","_hasShrinkwrap":false,"devDependencies":{"vows":"*","eslint":"^9.0.0","@eslint/js":"^9.0.0"},"_npmOperationalInternal":{"tmp":"tmp/json-schema-lts_0.4.1_1771359637560_0.018710216669732382","host":"s3://npm-registry-packages-npm-production"}},"0.4.2":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.2","keywords":["json","schema"],"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","_id":"@brickhouse-tech/json-schema-lts@0.4.2","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"homepage":"https://github.com/brickhouse-tech/json-schema#readme","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"dist":{"shasum":"bbb4fb51c34146191760713d36e8bb9143ad80fb","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.2.tgz","fileCount":5,"integrity":"sha512-wXvG6SRgK0ayZ2kQeVMrWwY/0kgrMmWjNeejIE1DFjqK+h+NEtposar/6HJxPIb52Yk8ZcqEetX70Xv3MWkv7g==","signatures":[{"sig":"MEQCIAzzTfUVqt6i1GKF8PglXF+et5NbY+m8iYBj2eboLJ+XAiBeBGUKy+WwMaz1dvzotbFIxQAd2aYI7R8mN9Uw5DgpfQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@brickhouse-tech%2fjson-schema-lts@0.4.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":27122},"main":"./lib/validate.js","gitHead":"150f9d38b77e6c8e7dc92e696321a4ad5d358823","scripts":{"lint":"eslint lib/ test/","test":"vows --spec test/*.js"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:db09113d-a014-47cf-82e7-19c1f9d41b39"}},"overrides":{"minimatch":">=10.2.1"},"repository":{"url":"git+https://github.com/brickhouse-tech/json-schema.git","type":"git"},"_npmVersion":"11.10.1","description":"JSON Schema validation and specifications","directories":{"lib":"./lib"},"_nodeVersion":"20.20.0","_hasShrinkwrap":false,"devDependencies":{"vows":"*","eslint":"^9.0.0","@eslint/js":"^9.0.0"},"_npmOperationalInternal":{"tmp":"tmp/json-schema-lts_0.4.2_1771900448802_0.8088177808571979","host":"s3://npm-registry-packages-npm-production"}},"0.4.3":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.3","keywords":["json","schema"],"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","_id":"@brickhouse-tech/json-schema-lts@0.4.3","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"homepage":"https://github.com/brickhouse-tech/json-schema#readme","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"dist":{"shasum":"46cbfd67404c99f0c97d3faeae5cd100bec7ee0d","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.3.tgz","fileCount":5,"integrity":"sha512-viY3vsWyjGA3Zl0yYwNFhlL4LJuHryacn4ChVh8TTWEDNYsAEAYAFTQjBo6SWA/JwUCvsPOyMUlDuITxAirfmQ==","signatures":[{"sig":"MEUCIAYevSjqKdr2v0G/vcUO89kDhVLCPbqDUyWVtXI//aMaAiEAtDJDePNzGjx15s1CECFnZnYo4JcE/+odoqLSDVgMTAU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@brickhouse-tech%2fjson-schema-lts@0.4.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":30979},"main":"./lib/validate.js","gitHead":"f23a99f34400ece0bc0290d8a4d7d12988f15677","scripts":{"lint":"eslint lib/ test/","test":"vows --spec test/*.js"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:db09113d-a014-47cf-82e7-19c1f9d41b39"}},"overrides":{"minimatch":">=10.2.1"},"repository":{"url":"git+https://github.com/brickhouse-tech/json-schema.git","type":"git"},"_npmVersion":"11.11.1","description":"JSON Schema validation and specifications","directories":{"lib":"./lib"},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"devDependencies":{"vows":"*","eslint":"^9.0.0","@eslint/js":"^9.0.0"},"_npmOperationalInternal":{"tmp":"tmp/json-schema-lts_0.4.3_1773802953471_0.5087625279515593","host":"s3://npm-registry-packages-npm-production"}},"0.4.4":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.4","keywords":["json","schema"],"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","_id":"@brickhouse-tech/json-schema-lts@0.4.4","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"homepage":"https://github.com/brickhouse-tech/json-schema#readme","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"dist":{"shasum":"1c878d01bf0d0dd49b97295845f19229551b4c03","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.4.tgz","fileCount":5,"integrity":"sha512-EcMlUgISZ4JY4Uo+wyrw2VZUa74cHIwedDX/w/glPYKnyGSXbZ+QpI+hD1gNQYSY0LLGIZotbG+5wIFIzXPhkw==","signatures":[{"sig":"MEUCICnEvGLXLlyxVcJ48gUyVJbKLTRLRaOPNgokK2It9sXPAiEApbv7JqKij2KJVB/OQlnHGaxYYSA8ThbO6sMayw8hxXA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@brickhouse-tech%2fjson-schema-lts@0.4.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":30979},"main":"./lib/validate.js","gitHead":"fc1d002656c6a4b3cd8bd48e69a15f130528c57b","scripts":{"lint":"eslint lib/ test/","test":"vows --spec test/*.js"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:db09113d-a014-47cf-82e7-19c1f9d41b39"}},"overrides":{"minimatch":">=10.2.1"},"repository":{"url":"git+https://github.com/brickhouse-tech/json-schema.git","type":"git"},"_npmVersion":"11.12.1","description":"JSON Schema validation and specifications","directories":{"lib":"./lib"},"_nodeVersion":"20.20.2","_hasShrinkwrap":false,"devDependencies":{"vows":"*","eslint":"^9.0.0","@eslint/js":"^9.0.0"},"_npmOperationalInternal":{"tmp":"tmp/json-schema-lts_0.4.4_1775310412703_0.5323487913579228","host":"s3://npm-registry-packages-npm-production"}},"0.4.5":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.5","keywords":["json","schema"],"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","_id":"@brickhouse-tech/json-schema-lts@0.4.5","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"homepage":"https://github.com/brickhouse-tech/json-schema#readme","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"dist":{"shasum":"2070b73237c5e31656d59264ad4c4f38aa3dcdaf","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.5.tgz","fileCount":5,"integrity":"sha512-aO+rKtpQyjFKvMG/tKbgyTOLpWoIkJHr5AFoI3Xf5S6uW+DEZyemy6o3hoLggFFxqymL8zJGDcu6eLSVpRw/FA==","signatures":[{"sig":"MEQCICDLcYnCRCuYrNKxUBw5im1uzhIftcKcfGnNb9Lo3PnjAiAI/7VftDp6fJY4uYElZzba3kajQKimL+rb3p/PAHzfNQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@brickhouse-tech%2fjson-schema-lts@0.4.5","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":30979},"main":"./lib/validate.js","gitHead":"2d761658e87e6feda7f93eac52255c28e75699a2","scripts":{"lint":"eslint lib/ test/","test":"vows --spec test/*.js"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:db09113d-a014-47cf-82e7-19c1f9d41b39"}},"overrides":{"minimatch":">=10.2.1"},"repository":{"url":"git+https://github.com/brickhouse-tech/json-schema.git","type":"git"},"_npmVersion":"11.11.0","description":"JSON Schema validation and specifications","directories":{"lib":"./lib"},"_nodeVersion":"24.14.1","_hasShrinkwrap":false,"devDependencies":{"vows":"*","eslint":"^9.0.0","@eslint/js":"^9.0.0"},"_npmOperationalInternal":{"tmp":"tmp/json-schema-lts_0.4.5_1778675905445_0.6233886877489929","host":"s3://npm-registry-packages-npm-production"}},"0.4.6":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.6","keywords":["json","schema"],"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","_id":"@brickhouse-tech/json-schema-lts@0.4.6","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"homepage":"https://github.com/brickhouse-tech/json-schema#readme","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"dist":{"shasum":"99aca71a5e5b6e379cb94f8e4ed825a23048c594","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.6.tgz","fileCount":5,"integrity":"sha512-FD4XyP8qYIjnhJljkoZhCCF4Lvp+aL3dOJiRJXAh3Q5NqIfQ/1a7bnZyYkG5wL0OnWEKxHqf5z8IYNREKHlmXQ==","signatures":[{"sig":"MEQCIEaOVZUFykVamU/PALyMjXsut2+KqZBqJSYVBBFGPK/VAiAhR3AQrlgxxOeJKl+20t4hJ3jzSIxMfJcos5uhdh96sA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@brickhouse-tech%2fjson-schema-lts@0.4.6","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":30979},"main":"./lib/validate.js","gitHead":"941b5ed439aa01d99b61ae8dffaa1a003917ddcd","scripts":{"lint":"eslint lib/ test/","test":"vows --spec test/*.js"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:db09113d-a014-47cf-82e7-19c1f9d41b39"}},"overrides":{"minimatch":">=10.2.1"},"repository":{"url":"git+https://github.com/brickhouse-tech/json-schema.git","type":"git"},"_npmVersion":"11.13.0","description":"JSON Schema validation and specifications","directories":{"lib":"./lib"},"_nodeVersion":"24.16.0","_hasShrinkwrap":false,"devDependencies":{"vows":"*","eslint":"^9.0.0","@eslint/js":"^9.0.0"},"_npmOperationalInternal":{"tmp":"tmp/json-schema-lts_0.4.6_1781627964076_0.1933733271570537","host":"s3://npm-registry-packages-npm-production"}},"0.4.7":{"name":"@brickhouse-tech/json-schema-lts","version":"0.4.7","author":{"name":"Kris Zyp"},"description":"JSON Schema validation and specifications","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"keywords":["json","schema"],"license":"(AFL-2.1 OR BSD-3-Clause)","repository":{"type":"git","url":"git+https://github.com/brickhouse-tech/json-schema.git"},"directories":{"lib":"./lib"},"main":"./lib/validate.js","devDependencies":{"vows":"*","@eslint/js":"^9.0.0","eslint":"^9.0.0"},"overrides":{"minimatch":">=10.2.1"},"scripts":{"test":"vows --spec test/*.js","lint":"eslint lib/ test/"},"gitHead":"c92db4242da8c808201986e891a06b944e76cb2c","_id":"@brickhouse-tech/json-schema-lts@0.4.7","bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"homepage":"https://github.com/brickhouse-tech/json-schema#readme","_nodeVersion":"24.17.0","_npmVersion":"11.13.0","dist":{"integrity":"sha512-pInr4p6DkVG+tKOPEvOfWYD7ZTLSKptnEwzWmRDvIe5K6V0oP/mFxY53N1AoWW7IpHuCjPJ0foYWKDnHn1bW8g==","shasum":"75e44dd296d092d95789d15327b15efda8642f36","tarball":"https://registry.npmjs.org/@brickhouse-tech/json-schema-lts/-/json-schema-lts-0.4.7.tgz","fileCount":5,"unpackedSize":30979,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@brickhouse-tech%2fjson-schema-lts@0.4.7","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIBcEouxjYABoepQSmLCrHNbfz0AG5dVoH6ySI9rIUYzUAiBZIJ67iN9HK9cka4TJfdgZqTlTYV2ZE3s3OiMYewHnXA=="}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:db09113d-a014-47cf-82e7-19c1f9d41b39"}},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/json-schema-lts_0.4.7_1782875880715_0.17696854814450202"},"_hasShrinkwrap":false}},"time":{"created":"2026-02-17T20:16:55.867Z","modified":"2026-07-01T03:18:01.136Z","0.4.1-0":"2026-02-17T20:16:56.245Z","0.4.1":"2026-02-17T20:20:37.714Z","0.4.2":"2026-02-24T02:34:08.951Z","0.4.3":"2026-03-18T03:02:33.649Z","0.4.4":"2026-04-04T13:46:52.833Z","0.4.5":"2026-05-13T12:38:25.670Z","0.4.6":"2026-06-16T16:39:24.217Z","0.4.7":"2026-07-01T03:18:00.863Z"},"bugs":{"url":"https://github.com/brickhouse-tech/json-schema/issues"},"author":{"name":"Kris Zyp"},"license":"(AFL-2.1 OR BSD-3-Clause)","homepage":"https://github.com/brickhouse-tech/json-schema#readme","keywords":["json","schema"],"repository":{"type":"git","url":"git+https://github.com/brickhouse-tech/json-schema.git"},"description":"JSON Schema validation and specifications","maintainers":[{"name":"nmccready","email":"nemtcan@gmail.com"}],"readme":"# json-schema — Critical Security Patch (CVSS 9.8)\n\n[![npm version](https://badge.fury.io/js/%40brickhouse-tech%2Fjson-schema-lts.svg)](https://www.npmjs.com/package/@brickhouse-tech/json-schema-lts)\n[![npm downloads](https://img.shields.io/npm/dm/@brickhouse-tech/json-schema-lts.svg)](https://www.npmjs.com/package/@brickhouse-tech/json-schema-lts)\n[![License](https://img.shields.io/badge/license-AFL--2.1%20OR%20BSD--3--Clause-blue.svg)](LICENSE)\n[![Security: Patched](https://img.shields.io/badge/security-CVE--2021--3918%20fixed-brightgreen)](https://nvd.nist.gov/vuln/detail/CVE-2021-3918)\n\n---\n\n## The Problem\n\nThe original [`json-schema`](https://www.npmjs.com/package/json-schema) package:\n- **28.9 million weekly downloads** on npm\n- **Abandoned by maintainers** — no release since 2014\n- **Critical prototype pollution vulnerability** (CVE-2021-3918, **CVSS 9.8**)\n- **Fix merged in 2021** but never published to npm\n\n**Your production apps are pulling vulnerable code right now.**\n\n---\n\n## The Solution\n\n**`@brickhouse-tech/json-schema-lts`** is a drop-in replacement with the critical security fix published and ready to deploy.\n\n✅ **CVE-2021-3918 patched**  \n✅ **API-compatible** — zero code changes required  \n✅ **Battle-tested** — same codebase, just with the fix shipped  \n✅ **LTS maintenance** — security patches published promptly  \n\n---\n\n## Migration Guide\n\n### One-Line Fix\n\n```bash\nnpm uninstall json-schema\nnpm install @brickhouse-tech/json-schema-lts\n```\n\nThat's it. No code changes. No API differences. Just a secure package.\n\n---\n\n## What's Fixed\n\n### CVE-2021-3918: Prototype Pollution (CVSS 9.8)\n\n**Vulnerability:**  \nAttackers could inject malicious properties like `__proto__` or `constructor` into schema objects, polluting JavaScript's prototype chain. This allows:\n- Arbitrary property injection into all objects\n- Authentication bypasses\n- Remote code execution in some contexts\n- Denial of service\n\n**Example Attack:**\n```json\n{\n  \"type\": \"object\",\n  \"properties\": {\n    \"__proto__\": { \"isAdmin\": true }\n  }\n}\n```\n\n**The Fix:**  \nOur fork includes [the upstream patch](https://github.com/kriszyp/json-schema/pull/101) that validates and sanitizes dangerous property names before schema processing. The fix:\n- Blocks `__proto__`, `constructor`, and `prototype` in schema keys\n- Prevents prototype chain pollution during validation\n- Maintains full backward compatibility for legitimate schemas\n\n**Impact:**  \nThis is rated **Critical (9.8)** because prototype pollution can lead to complete application compromise in many JavaScript environments.\n\n---\n\n## Enterprise Support\n\nNeed SLA guarantees, priority patches, or dedicated security support?\n\n### Support Tiers\n\n| Tier | Response Time | Support Channels | Custom Patches |\n|------|---------------|------------------|----------------|\n| **Community** | Best-effort | GitHub Issues | ❌ |\n| **Professional** | 48 hours | Email + Slack | ✅ |\n| **Enterprise** | 4 hours | Dedicated channel | ✅ Priority |\n\n👉 **[View pricing and sign up](https://brickhouse-tech.lemonsqueezy.com)**  \n_(Coming soon — contact for early access)_\n\nFor compliance officers: we provide CVE notifications, SBOM exports, and security attestation on request.\n\n---\n\n## Support Open Source Maintenance\n\nKeeping critical infrastructure secure is a public good. If this package protects your stack, consider supporting continued LTS maintenance:\n\n💖 **[GitHub Sponsors](https://github.com/sponsors/brickhouse-tech)**\n\nYour sponsorship funds:\n- Security monitoring and rapid CVE response\n- Automated testing and release pipelines\n- Dependency updates and compatibility fixes\n- Public incident response and disclosure\n\n---\n\n## About This Package\n\nThis is a community-maintained LTS fork of the original [`json-schema`](https://github.com/kriszyp/json-schema) package by Kris Zyp. \n\nThe upstream package represents an early, efficient implementation of JSON Schema draft specifications. While the spec has evolved (see [json-schema.org](https://json-schema.org/)), this package remains a foundational dependency for millions of projects.\n\n**Our mission:** Publish critical security fixes that upstream can't or won't ship.\n\n### What We Do\n\n✅ Backport and publish security patches  \n✅ Keep CI and tooling current  \n✅ Respond to new CVEs within 72 hours  \n✅ Maintain API stability  \n\n### What We Don't Do\n\n❌ Add new features  \n❌ Implement new JSON Schema drafts  \n❌ Break backward compatibility  \n\nThis is an LTS (Long-Term Support) fork, not a feature fork. If you need bleeding-edge JSON Schema features, see the [official implementations](https://json-schema.org/implementations).\n\n---\n\n## Installation\n\n```bash\nnpm install @brickhouse-tech/json-schema-lts\n```\n\nThen update your imports (if not using `json-schema` as an alias):\n\n```javascript\n// Before:\nconst validator = require('json-schema');\n\n// After:\nconst validator = require('@brickhouse-tech/json-schema-lts');\n```\n\nOr create an npm alias for zero code changes:\n\n```bash\nnpm install json-schema@npm:@brickhouse-tech/json-schema-lts\n```\n\n---\n\n## Security Disclosure\n\nFound a vulnerability? Please report it responsibly:\n\n📧 **Email:** zbricktarz@gmail.com  \n🔒 **PGP:** Available on request  \n⏱️ **Response SLA:** 72 hours for critical issues\n\nWe follow coordinated disclosure practices and will credit researchers in security advisories.\n\n---\n\n## License\n\nLicensed under **AFL-2.1 OR BSD-3-Clause** (same as upstream).\n\nOriginal code by Kris Zyp. Security maintenance by [Brickhouse Tech](https://github.com/brickhouse-tech).\n\n---\n\n## Questions?\n\n- **Issues & Bug Reports:** [GitHub Issues](https://github.com/brickhouse-tech/json-schema/issues)\n- **Security Concerns:** zbricktarz@gmail.com\n- **Enterprise Support:** [Lemon Squeezy](https://brickhouse-tech.lemonsqueezy.com) _(coming soon)_\n- **Sponsorship:** [GitHub Sponsors](https://github.com/sponsors/brickhouse-tech)\n\n**Don't wait for a breach.** Upgrade today.\n","readmeFilename":"README.md"}