Socket
Socket
Sign inDemoInstall

isbot

Package Overview
Dependencies
0
Maintainers
2
Versions
125
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    isbot

🤖 Recognise bots/crawlers/spiders using the user agent string.


Version published
Weekly downloads
397K
decreased by-15.02%
Maintainers
2
Created
Weekly downloads
 

Readme

Source

isbot 🤖/👨‍🦰

Recognise bots/crawlers/spiders using the user agent string.

Usage

import { isbot } from "isbot";

// Nodejs HTTP
isbot(request.getHeader("User-Agent"));

// ExpressJS
isbot(req.get("user-agent"));

// Browser
isbot(navigator.userAgent);

// User Agent string
isbot(
  "Mozilla/5.0 (iPhone; CPU iPhone OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)",
); // true

isbot(
  "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
); // false

Using JSDeliver CDN you can import an iife script

See specific versions https://www.jsdelivr.com/package/npm/isbot or https://cdn.jsdelivr.net/npm/isbot

<script src="https://cdn.jsdelivr.net/npm/isbot@4"></script>
// isbot is global isbot(navigator.userAgent)

Additional named imports

importTypeDescription
pattern{RegExp}The regular expression used to identify bots
list{string[]}List of all individual pattern parts
isbotMatch{(userAgent: string): string | null}The substring matched by the regular expression
isbotMatches{(userAgent: string): string[]}All substrings matched by the regular expression
isbotPattern{(userAgent: string): string | null}The regular expression used to identify bot substring in the user agent
isbotPatterns{(userAgent: string): string[]}All regular expressions used to identify bot substrings in the user agent
createIsbot{(pattern: RegExp): (userAgent: string): boolean}Create a custom isbot function

Examples

Create a custom isbot function ignoring Chrome Lighthouse

import { createIsbot, list } from "isbot";

const isbot = createIsbot(
  new RegExp(
    list
      .filter((record) => !new RegExp(record, "i").test("Chrome-Lighthouse"))
      .join("|"),
    "i",
  ),
);

Create a custom isbot function including another pattern

import { createIsbot, list } from "isbot";

const isbot = createIsbot(new RegExp(list.concat("shmulik").join("|"), "i"));

Definitions

  • Bot. Autonomous program imitating or replacing some aspect of a human behaviour, performing repetitive tasks much faster than human users could.
  • Good bot. Automated programs who visit websites in order to collect useful information. Web crawlers, site scrapers, stress testers, preview builders and other programs are welcomed on most websites because they serve purposes of mutual benefits.
  • Bad bot. Programs which are designed to perform malicious actions, ultimately hurting businesses. Testing credential databases, DDoS attacks, spam bots.

Clarifications

What does "isbot" do?

This package aims to identify "Good bots". Those who voluntarily identify themselves by setting a unique, preferably descriptive, user agent, usually by setting a dedicated request header.

What doesn't "isbot" do?

It does not try to recognise malicious bots or programs disguising themselves as real users.

Why would I want to identify good bots?

Recognising good bots such as web crawlers is useful for multiple purposes. Although it is not recommended to serve different content to web crawlers like Googlebot, you can still elect to

  • Flag pageviews to consider with business analysis.
  • Prefer to serve cached content and relieve service load.
  • Omit third party solutions' code (tags, pixels) and reduce costs.

    It is not recommended to whitelist requests for any reason based on user agent header only. Instead other methods of identification can be added such as reverse dns lookup.

Data sources

We use external data sources on top of our own lists to keep up to date

Crawlers user agents:

Non bot user agents:

Missing something? Please open an issue

Major releases breaking changes (full changelog)

Version 4

Remove isbot function default export

Version 3

Remove testing for node 6 and 8

Version 2

Change return value for isbot: true instead of matched string

Version 1

No functional change

Real world data

Execution times in milliseconds

Keywords

FAQs

Last updated on 18 Dec 2023

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc