I've used js-yaml, seems like what pulumi also uses for node.