• Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. ([#299])

• Fix: Properties with the name __proto__ are added to objects and arrays. ([#199]) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! ([#295]). This has been backported to v1. ([#298])

• Fix: Properties with the name __proto__ are added to objects and arrays.
  (#199) This also fixes a prototype pollution vulnerability reported by
  Jonathan Gregson! (#295).

• Fix: Removed dependence on minimist to patch CVE-2021-44906. ([#266])

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. ([#236], [#244])

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. ([#228], [#229])

• Fix: Bump minimist to v1.2.5. ([#222])

• New: package.json and package.json5 include a module property so
  bundlers like webpack, rollup and parcel can take advantage of the ES Module
  build. ([#208])
• Fix: stringify outputs \0 as \\x00 when followed by a digit. ([#210])
• Fix: Spelling mistakes have been fixed. ([#196])

• New: The index.mjs and index.min.mjs browser builds in the dist directory support ES6 modules. (#187)

• Fix: The browser builds in the dist directory support ES5. (#182)