I'd heard of CSON before. I didn't remember hearing about CBOR (but I had an implementation of CBOR already starred on GitHub apparently). However, given the following:
> CBOR is defined in an Internet Standards Document, RFC 7049. The format has been designed to be stable for decades.
I see no reason to go with CSON over CBOR. In fact just the opposite.