jq

jq at a glance

jq is the ubiquitous command-line JSON processor, used everywhere to filter, transform and query JSON in scripts, pipelines and CI. jq ships releases in an unhurried cadence plus fixes; it's a small, focused tool on countless systems.

For admins jq is low-risk and usually comes from the distribution. The update driver is features and bug fixes rather than security, though it's worth keeping current, since jq processes JSON that may come from untrusted sources (API responses), and parser fixes land occasionally. Its value is operational: jq makes working with JSON in shell scripts and automation tractable, and it's a dependency of many admin workflows and other tools. There's little to maintain beyond a current version. When scripting with jq, be mindful of handling untrusted input predictably. Related tools (yq for YAML) fill adjacent roles. Patchletter surfaces new jq releases so fixes land.