
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@thi.ng/strings
Advanced tools
[!NOTE] This is one of 210 standalone projects, maintained as part of the @thi.ng/umbrella monorepo and anti-framework.
🚀 Please help me to work full-time on these projects by sponsoring me on GitHub. Thank you! ❤️
Various (~100) string formatting, word wrapping & utility functions, some higher-order, some memoized.
Partially based on Clojure version of thi.ng/strf.
defFormat / formatinterpolate / interpolateKeysescape / unescapejoin / splice / splitrepeatstringifycurrency / chf / eur / gpb / usd / yenradixint / intLocalefloat / floatFixedWidthmaybeParseFloat / maybeParseIntpercentuuidvectorB8 / B16 / B32 - fixed size binary formattersU8 / U16 / U24 / U32 / U64 - fixed size hex formattersZ2 / Z3 / Z4 - fixed sized zero padded number formatterslower / upper / capitalizecamel / kebab / snake / upperSnakeslugify / slugifyGHisAnsi / isAnsiEnd / isAnsiStartstripAnsilengthAnsiwordWrap / wordWrapLine / wordWrapLinesSPLIT_PLAIN / SPLIT_ANSIcenterpadLeft / padRighttruncate / truncateLeft / truncateRighttrimwrapspacesToTabs / spacesToTabsLinetabsToSpaces / tabsToSpacesLinecharRangeALPHA / ALPHA_NUM / DIGITS / LOWER / UPPER / HEXBOM / ESCAPES / ESCAPES_REVWS / PUNCTUATIONunitsbits / bytesgramsmeterssecondsruler / gridhstr - Hollerith stringscomputeCursorPosSTABLE - used in production
Search or submit any issues for this package
yarn add @thi.ng/strings
ESM import:
import * as str from "@thi.ng/strings";
Browser ESM import:
<script type="module" src="https://esm.run/@thi.ng/strings"></script>
For Node.js REPL:
const str = await import("@thi.ng/strings");
Package sizes (brotli'd, pre-treeshake): ESM: 5.54 KB
Note: @thi.ng/api is in most cases a type-only import (not used at runtime)
Eight projects in this repo's /examples directory are using this package:
| Screenshot | Description | Live demo | Source |
|---|---|---|---|
![]() | ASCII art raymarching with thi.ng/shader-ast & thi.ng/text-canvas | Demo | Source |
![]() | Large ASCII font text generator using @thi.ng/rdom | Demo | Source |
![]() | Basic crypto-currency candle chart with multiple moving averages plots | Demo | Source |
| Basic SPA example with atom-based UI router | Demo | Source | |
![]() | Mastodon API feed reader with support for different media types, fullscreen media modal, HTML rewriting | Demo | Source |
![]() | Generative audio synth offline renderer and WAV file export | Demo | Source |
![]() | rstream based spreadsheet w/ S-expression formula DSL | Demo | Source |
![]() | XML/HTML/SVG to hiccup/JS conversion | Demo | Source |
import { defFormat, float, percent } from "@thi.ng/strings";
// create a custom string formatter
const fmt = defFormat([
"Price: ",
{ usd: "$", gbp: "£", eur: "€" },
float(2),
" (",
percent(2),
" off)"
]);
// use format
fmt("usd", 1.2345, 0.5);
// Price: $1.23 (50.00% off)
fmt("eur", 1.2345, 0.25)
// Price: €1.23 (25.00% off)
If this project contributes to an academic publication, please cite it as:
@misc{thing-strings,
title = "@thi.ng/strings",
author = "Karsten Schmidt",
note = "https://thi.ng/strings",
year = 2015
}
© 2015 - 2025 Karsten Schmidt // Apache License 2.0
FAQs
Various string formatting & utility functions
The npm package @thi.ng/strings receives a total of 3,852 weekly downloads. As such, @thi.ng/strings popularity was classified as popular.
We found that @thi.ng/strings demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.