
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
@unified-latex/unified-latex-util-pegjs
Advanced tools
PEGjs grammars and tools for constructing unified-latex ASTs
Pegjs grammars to help parse strings into a unified-latex Abstract Syntax Tree (AST). Note,
because of the dynamic nature of LaTeX, to get a full AST with arguments attached to macros, etc.,
the tree is parsed multiple times.
Also included are functions to decorate a Ast.Node[] array so that Pegjs can process it as if it were
a string. This allows for complex second-pass parsing.
If you are building libraries to parse specific LaTeX syntax (e.g., to parse tabular environments or
systeme environments, etc.).
npm install @unified-latex/unified-latex-util-pegjs
This package contains both esm and commonjs exports. To explicitly access the esm export,
import the .js file. To explicitly access the commonjs export, import the .cjs file.
decorateArrayForPegjs(array)Pegjs operates on strings. However, strings and arrays are very similar!
This function adds charAt, charCodeAt, and substring methods to
array so that array can then be fed to a Pegjs generated parser.
function decorateArrayForPegjs(array: any[]): StringlikeArray;
Parameters
| Param | Type |
|---|---|
| array | any[] |
splitStringsIntoSingleChars(nodes)Splits all multi-character strings into strings that are all single characters.
function splitStringsIntoSingleChars(nodes: Ast.Node[]): Ast.Node[];
Parameters
| Param | Type |
|---|---|
| nodes | Ast.Node[] |
FAQs
PEGjs grammars and tools for constructing unified-latex ASTs
We found that @unified-latex/unified-latex-util-pegjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.