
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
devtools-sprintf-js
Advanced tools
sprintf.js is a complete open source JavaScript sprintf implementation for the browser and node.js.
Its prototype is simple:
string sprintf(string format , [mixed arg1 [, mixed arg2 [ ,...]]])
The placeholders in the format string are marked by %
and are followed by one or more of these elements, in this order:
$
sign that selects which argument index to use for the value. If not specified, arguments will be placed in the same order as the placeholders in the input string.+
sign that forces to preceed the result with a plus or minus sign on numeric values. By default, only the -
sign is used on negative numbers.0
or any other character precedeed by a '
(single quote). The default is to pad with spaces.-
sign, that causes sprintf to left-align the result of this placeholder. The default is to right-align the result.j
(JSON) type specifier, the padding length specifies the tab size used for indentation..
(dot) followed by a number, that says how many digits should be displayed for floating point numbers. When used with the g
type specifier, it specifies the number of significant digits. When used on a string, it causes the result to be truncated.%
— yields a literal %
characterb
— yields an integer as a binary numberc
— yields an integer as the character with that ASCII valued
or i
— yields an integer as a signed decimal numbere
— yields a float using scientific notationu
— yields an integer as an unsigned decimal numberf
— yields a float as is; see notes on precision aboveg
— yields a float as is; see notes on precision aboveo
— yields an integer as an octal numbers
— yields a string as ist
— yields true
or false
T
— yields the type of the argument1v
— yields the primitive value of the specified argumentx
— yields an integer as a hexadecimal number (lower-case)X
— yields an integer as a hexadecimal number (upper-case)j
— yields a JavaScript object or array as a JSON encoded stringvsprintf
vsprintf
is the same as sprintf
except that it accepts an array of arguments, rather than a variable number of arguments:
vsprintf("The first 4 letters of the english alphabet are: %s, %s, %s and %s", ["a", "b", "c", "d"])
You can also swap the arguments. That is, the order of the placeholders doesn't have to match the order of the arguments. You can do that by simply indicating in the format string which arguments the placeholders refer to:
sprintf("%2$s %3$s a %1$s", "cracker", "Polly", "wants")
And, of course, you can repeat the placeholders without having to increase the number of arguments.
Format strings may contain replacement fields rather than positional placeholders. Instead of referring to a certain argument, you can now refer to a certain key within an object. Replacement fields are surrounded by rounded parentheses - (
and )
- and begin with a keyword that refers to a key:
var user = {
name: "Dolly"
}
sprintf("Hello %(name)s", user) // Hello Dolly
Keywords in replacement fields can be optionally followed by any number of keywords or indexes:
var users = [
{name: "Dolly"},
{name: "Molly"},
{name: "Polly"}
]
sprintf("Hello %(users[0].name)s, %(users[1].name)s and %(users[2].name)s", {users: users}) // Hello Dolly, Molly and Polly
Note: mixing positional and named placeholders is not (yet) supported
You can pass in a function as a dynamic value and it will be invoked (with no arguments) in order to compute the value on-the-fly.
sprintf("Current timestamp: %d", Date.now) // Current timestamp: 1398005382890
sprintf("Current date and time: %s", function() { return new Date().toString() })
You can now use sprintf
and vsprintf
(also aliased as fmt
and vfmt
respectively) in your AngularJS projects. See demo/
.
bower install sprintf
npm install sprintf-js
var sprintf = require("sprintf-js").sprintf,
vsprintf = require("sprintf-js").vsprintf
sprintf("%2$s %3$s a %1$s", "cracker", "Polly", "wants")
vsprintf("The first 4 letters of the english alphabet are: %s, %s, %s and %s", ["a", "b", "c", "d"])
sprintf.js is licensed under the terms of the 3-clause BSD license.
1 sprintf
doesn't use the typeof
operator. As such, the value null
is a null
, an array is an array
(not an object
), a date value is a date
etc.
FAQs
JavaScript sprintf implementation (Fork of sprintf-js)
The npm package devtools-sprintf-js receives a total of 44 weekly downloads. As such, devtools-sprintf-js popularity was classified as not popular.
We found that devtools-sprintf-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.