- Sources: primary, discussion, discussion
- Summary: The Apache Fory project published JMH benchmarks putting Fory JSON 1.6.0 at 3.5x to 10.9x the throughput of Jackson Databind 2.17.1 on Java, with Gson 2.11.0 also measured. The post names its fork, warmup, and iteration counts. It documents a closed-world
JsonSubTypes model that refuses arbitrary class names from input. - Why it matters: The stated method makes the numbers checkable, and the closed-world subtype model addresses the deserialization gadget class that has repeatedly affected Java JSON libraries.
send feedback on this story