Should I use YAML or JSON to store my Perl data? [closed]

YAML vs JSON is something very much not settled in Perl, and I will admit I tend to be in the middle of that. I would advice that either is going to get you about as much community traction. I'd make the decision based on the various pros and cons of the formats. I break down the various data serializing options like so (I'm going to community wiki this so people can add to it):

YAML Pros

• Human friendly, people write basic YAML without even knowing it
• WYSIWYG strings
• Expressive (it has the TMTOWDI nature)
• Expandable type/metadata system
• Perl compatible data types
• Portable
• Familiar (a lot of the inline and string syntax looks like Perl code)
• Good implementations if you have a compiler (YAML::XS)
• Good ability to dump Perl data
• Compact use of screen space (possible, you can format to fit in one line)

YAML Cons

• Large spec
• Unreliable/incomplete pure Perl implementations
• Whitespace as syntax can be contentious.

JSON Pros

• Human readable/writable
• Small spec
• Good implementations
• Portable
• Perlish syntax
• YAML 1.2 is a superset of JSON
• Compact use of screen space
• Perl friendly data types
• Lots of things handle JSON

JSON Cons

• Strings are not WYSIWYG
• No expandability
• Some Perl structures have to be expressed ad-hoc (objects & globs)
• Lack of expressibility

XML Pros

• Widespread use
• Syntax familiar to web developers
• Large corpus of good XML modules
• Schemas
• Technologies to search and transform the data
• Portable

XML Cons

• Tedious for humans to read and write
• Data structures foreign to Perl
• Lack of expressibility
• Large spec
• Verbose

Perl/Data::Dumper Pros

• No dependencies
• Surprisingly compact (with the right flags)
• Perl friendly
• Can dump pretty much anything (via DDS)
• Expressive
• Compact use of screen space
• WYSIWYG strings
• Familiar

Perl/Data::Dumper Cons

• Non-portable (to other languages)
• Insecure (without heroic measures)
• Inscrutable to non-Perl programmers

Storable Pros

• Compact? (don't have numbers to back it up)
• Fast? (don't have numbers to back it up)

Storable Cons

• Human hostile
• Incompatible across Storable versions
• Non-portable (to other languages)

As with most things, it depends. I think if you want speed and interoperability (with other languages), use JSON, in particular JSON::XS.

If you want something that's only ever going to be used by Perl modules, stick with YAML. It's much more common to find Perl modules on CPAN that support data description with YAML, or which depend on YAML, than JSON.

Note that I am not an authority and this opinion is based largely on hunch and conjecture. In particular, I have not profiled JSON::XS vs. YAML::XS. If I am offensively ignorant, I can only hope I will make someone irate enough to bring useful information to the discussion by correcting me.

It's all about human-readability, if this is your main concern choose YAML:

YAML:

american:
  - Boston Red Sox
  - Detroit Tigers
  - New York Yankees
national:
  - New York Mets
  - Chicago Cubs
  - Atlanta Braves

JSON:

{
  "american": [
    "Boston Red Sox", 
    "Detroit Tigers", 
    "New York Yankees"
  ], 
  "national": [
    "New York Mets", 
    "Chicago Cubs", 
    "Atlanta Braves"
  ]
}

The pure-Perl YAML implementation (YAML module as opposed to YAML::Syck) seems to have some serious problems. I recently ran into issues where it could not process YAML documents with very long lines (32k characters or so).

YAML is able to store and load blessed variables and does so by default (The snippet below was copied from a *sepia-repl* buffer in Emacs):

I need user feedback!  Please send questions or comments to [email protected].
Sepia version 0.98.
Type ",h" for help, or ",q" to quit.
main @> use YAML
undef
main @> $foo = bless {}, 'asdf'
bless( {}, 'asdf' )
main @> $foo_dump = YAML::Dump $foo
'--- !!perl/hash:asdf {}
'
main @> YAML::Load $foo_dump
bless( {}, 'asdf' )

This is quite scary security-wise because untrusted data can be used to call any DESTROY method that has been defined in your application -- or any of the modules it uses.

The following short program demonstrates the problem:

#!/usr/bin/perl
use YAML;
use Data::Dumper;
package My::Namespace;
sub DESTROY {
    print Data::Dumper::Dumper \@_;
}
package main;
my $var = YAML::Load '--- !!perl/hash:My::Namespace
bar: 2
foo: 1
';

JSON does not allow this by default -- it is possible to serialize Perl "objects", but in order to do that, you have to define TO_JSON methods.