
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Library for parsing BibTeX .bib files, based mostly on the excellent guide to BibTeX, Tame the BeaST.
Written in Typescript, compiled to ES5 Javascript (with typings provided).
This module literally just parses a BibTex file and processes it as far as BibTeX goes. It doesn't process TeX commands (i.e., {\"o} is not translated to ö). If you want to actually work with a bibliography, look for Bibliography.js.
Not all internal BibTeX functions are implemented, simply because I don't need them personally. Most notably sorting entries is still an open issue because BibTeX has a little complicated algorithm which required a function that "purifies" field values, which for example makes {\ss} equivalent to ss but makes ä come after z. I am unsure if that is actually what anyone wants in modern days though. A modern approach would be to use Unicode collation and then sort.
Pull requests and issues are welcome.
import {parseBibFile} from "bibtex";
const bibFile = parseBibFile(`
@InProceedings{mut2011,
author = {Pradeep Muthukrishnan and Dragomir Radev and Qiaozhu Mei},
title = {Simultaneous Similarity Learning and Feature-Weight Learning for Document Clustering},
booktitle = {Proceedings of TextGraphs-6: Graph-based Methods for Natural Language Processing},
month = {June},
year = {2011},
address = {Portland, Oregon},
publisher = {Association for Computational Linguistics},
url = {http://www.aclweb.org/anthology/W11-1107},
pages = {42--50}
}
`);
console.log(
// Keys are case-insensitive
bibFile.getEntry("MUT2011").getField("TITLE")
); // Prints some complicated string
FAQs
Library for parsing a BiBTeX file in pure Javascript / Typescript
We found that bibtex demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.