Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Find line number and cursor of string or Regex in a multi-line input
npm install locater
Below is an example of how locater may be used.
input.txt
In my younger and more vulnerable years
my father gave me some advice that
I've been turning over in my mind ever since.
js
var locater = require('locater');
var input = fs.readFileSync('./input.txt', {encoding: 'utf8'});
locater.find('my', input);
// => [{ line: 1, cursor: 4 }, { line: 2, cursor: 1 }, { line: 3, cursor: 27 }]
locater.find(['my', 'some'], input);
// => [ { line: 1, cursor: 4 }, { line: 2, cursor: 1 }, { line: 2, cursor: 19 },
// { line: 3, cursor: 27 } ]
locater.find(/[a-zA-Z]{7}\s/g, input);
// => [{ line: 1, cursor: 7 }, { line: 1, cursor: 27 }, { line: 3, cursor: 11 }]
locater.find([/[a-zA-Z]{7}\s/g, /my/g], input);
// => [ { line: 1, cursor: 7 }, { line: 1, cursor: 27 }, { line: 1, cursor: 4 },
// { line: 2, cursor: 1 }, { line: 3, cursor: 11 }, { line: 3, cursor: 27 } ]
locater.find([/[a-zA-Z]{7}\s/g, 'me'], input);
//=> [ { line: 1, cursor: 7 }, { line: 1, cursor: 27 }, { line: 2, cursor: 16 },
// { line: 3, cursor: 11 } ]
locater.findOne('my', input);
// => { line: 1, cursor: 4 }
locater.findOne('shiny unicorn', input);
// => null
locater.any('mind', input);
// => true
Returns an array of positions of occurrences of pattern
in input
. A position
is represented by an object with keys line
and cursor
. If there is no match,
locater returns an empty array.
pattern
can be either String, Regex or an Array.
An array can have a combination of String and Regex as its elements. For instance,
you can provide [/[a-zA-Z]{5}/g, 'foo']
as an argument. Any Regex should be
declared as global.
options
is an optional. Default value is as follows:
{
getGlobalIndices: false,
getMatches: false
}
getGlobalIndices
: return a global index of the match in the position object.
The global index is the index of the match in the context of the whole input.
getMatches
: return exact matches for the regexes in the position object.
e.g.
locater.find('gooood', 'Bacon tastes gooood.\nPork chops taste gooood.', {
getGlobalIndices: true
});
// => [ { line: 1, cursor: 14, globalIndex: 13 },
// { line: 2, cursor: 18, globalIndex: 38 } ]
locater.find(/[a-zA-Z]{6}\./g, input, {getMatches: true});
// => [ { line: 1, cursor: 14, match: 'gooood.' },
// { line: 2, cursor: 18, match: 'gooood.' } ]
Returns the position of the first occurrence of pattern
in input
.
More efficient than find
if you are interested in the first occurrence only.
Checks if there is any occurrence of pattern
in input
. Returns true
if
there is a match, and false
otherwise.
Run npm test
to run tests.
Feel free to open issues with bugs and feature requests. If you submit a PR with a new feature, please write a simple test.
MIT
FAQs
Easily locate string or regex in a multi-line input
The npm package locater receives a total of 5,468 weekly downloads. As such, locater popularity was classified as popular.
We found that locater demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.