18 KB gz, tree-shakableSubpath imports — `jtcsv/csv`, `jtcsv/json`, `jtcsv/streams`, `jtcsv/ndjson`, `jtcsv/tsv`, `jtcsv/errors`. Pay for what you import.
CSV injection guard by defaultCells starting with `= + - @ \t \r` are escaped before they ever reach Excel or Numbers. On by default — flip off only if you know why.
Streaming + worker threadsNode `Transform` streams, async iterators, and an opt-in worker-thread pool when the input is large enough to amortize spawn cost.
TypeScript-nativeStrict TypeScript baseline, first-class `.d.ts`, and a regression ratchet that won't let strict errors climb back up.
Provenance-signed releasesEvery release ≥ 3.0 ships with a Sigstore attestation. Verify with `npm audit signatures`.
Migration codemod`npx jtcsv-codemod papaparse 'src/**/*.{js,ts}'` rewrites imports and call sites automatically.