
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
haystack-search
Advanced tools
Haystack is a lightweight search / suggestion library that can be used to find similar matches to a word. Just provide the source data to search against (as an array or object), and Haystack will return a list of approximate matches. The lower the flexibility the more strict your matches will be.
Using npm:
npm i haystack-search
Import Haystack into your project:
import Haystack from 'haystack-search';
// or
const Haystack = require('haystack-search');
const haystack = new Haystack(options);
| Option | Default | Description |
|---|---|---|
flexibility (number) | 2 | "Fuzziness" of search. The lower the number, the more strict your matches will be. (If set to 0, Haystack will only look for perfect matches) |
caseSensitive (boolean) | false | Whether or not search is case sensitive |
exclusions (array) | [] | An array of strings or regexes to ignore in query |
ignoreStopWords (boolean) | false | Ignore common stop words such as the, a, in, etc. |
stemming (boolean) | false | Reduces tokens in a query to their base words using stemmer |
haystack.search(searchTerm, source, [limit]);
Returns an array of matches within your flexibility range. If no limit is given, the default number of results will be 1.
haystack.tokenize(searchTerm, [delimiter]);
Returns an array of tokens. By default this splits on whitespaces, but you can define a custom delimiter to use instead.
Contributions and suggestions for improvement are always welcome!
FAQs
Search for approximate matches to a query
We found that haystack-search demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.