Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
mdast-util-find-and-replace
Advanced tools
The mdast-util-find-and-replace npm package is a utility for finding and replacing text or patterns in Markdown Abstract Syntax Trees (MDAST). It is particularly useful for manipulating Markdown documents programmatically, allowing developers to automate content updates, apply transformations, and enhance Markdown processing workflows.
Text Replacement
This feature allows you to replace specific text in the MDAST. In the provided code, 'world' is replaced with 'universe' within the text node of a paragraph.
const u = require('unist-builder');
const findAndReplace = require('mdast-util-find-and-replace');
const tree = u('paragraph', [
u('text', 'Hello world!')
]);
findAndReplace(tree, {'world': 'universe'});
console.log(tree);
Pattern Replacement with Callback
This feature allows replacing patterns using regular expressions. In the example, occurrences of 'example.com' are turned into clickable links.
const u = require('unist-builder');
const findAndReplace = require('mdast-util-find-and-replace');
const tree = u('paragraph', [
u('text', 'Visit example.com for more info.')
]);
findAndReplace(tree, /example\.com/g, (match) => {
return {
type: 'link',
url: 'http://example.com',
children: [{type: 'text', value: match}]
};
});
console.log(tree);
remark-retext is a plugin that bridges between remark (Markdown processor) and retext (natural language processor). While it focuses on natural language processing, it can be used in conjunction with plugins like retext-string-replace to achieve similar find-and-replace functionalities. However, it requires setting up a pipeline with retext, making it less direct than mdast-util-find-and-replace for simple replacements.
unist-util-visit is a utility for traversing Unist nodes, which can be used to manually implement find-and-replace functionalities by visiting nodes and modifying them. It offers more control and customization over how nodes are visited and modified compared to mdast-util-find-and-replace, which is more specialized and straightforward for text replacements.
mdast utility to find and replace things.
This package is a utility that lets you find patterns (string
, RegExp
) in
text and replace them with nodes.
This utility is typically useful when you have regexes and want to modify mdast.
One example is when you have some form of “mentions” (such as
/@([a-z][_a-z0-9])\b/gi
) and want to create links to persons from them.
A similar package, hast-util-find-and-replace
does the same but on hast.
This package is ESM only. In Node.js (version 12.20+, 14.14+, or 16.0+), install with npm:
npm install mdast-util-find-and-replace
In Deno with esm.sh
:
import {findAndReplace} from 'https://esm.sh/mdast-util-find-and-replace@2'
In browsers with esm.sh
:
<script type="module">
import {findAndReplace} from 'https://esm.sh/mdast-util-find-and-replace@2?bundle'
</script>
import {u} from 'unist-builder'
import {inspect} from 'unist-util-inspect'
import {findAndReplace} from 'mdast-util-find-and-replace'
const tree = u('paragraph', [
u('text', 'Some '),
u('emphasis', [u('text', 'emphasis')]),
u('text', ' and '),
u('strong', [u('text', 'importance')]),
u('text', '.')
])
findAndReplace(tree, [
[/and/gi, 'or'],
[/emphasis/gi, 'em'],
[/importance/gi, 'strong'],
[
/Some/g,
function ($0) {
return u('link', {url: '//example.com#' + $0}, [u('text', $0)])
}
]
])
console.log(inspect(tree))
Yields:
paragraph[8]
├─0 link[1]
│ │ url: "//example.com#Some"
│ └─0 text "Some"
├─1 text " "
├─2 emphasis[1]
│ └─0 text "em"
├─3 text " "
├─4 text "or"
├─5 text " "
├─6 strong[1]
│ └─0 text "strong"
└─7 text "."
This package exports the identifier findAndReplace
.
There is no default export.
findAndReplace(tree, find, replace[, options])
Find patterns in a tree and replace them.
The algorithm searches the tree in preorder for complete values in
Text
nodes.
Partial matches are not supported.
findAndReplace(tree, find, replace[, options])
findAndReplace(tree, search[, options])
tree
(Node
)find
(string
or RegExp
)
— value to find and remove (string
s are escaped and turned into a global
RegExp
)replace
(string
or Function
)
— value to insert.
string
s are turned into a Text
node,
Function
s are called with the results of calling RegExp.exec
as
arguments, and they can return a Node
, a string
(which is
wrapped in a Text
node), or false
to not replacesearch
(Array
or Object
)
— perform multiple find-and-replaces.
Either an Array
of tuples (Array
s) with find
(at 0
) and replace
(at 1
), or an Object
where each key is find
and each value is
the corresponding replace
options.ignore
(Test
, default: []
)
— any unist-util-is
compatible test.The given tree
(Node
).
This package is fully typed with TypeScript.
It exports the types Find
, Replace
, ReplaceFunction
,
FindAndReplaceTuple
, FindAndReplaceSchema
, FindAndReplaceList
,
RegExpMatchObject
, and Options
.
Projects maintained by the unified collective are compatible with all maintained versions of Node.js. As of now, that is Node.js 12.20+, 14.14+, and 16.0+. Our projects sometimes work with older versions, but this is not guaranteed.
Use of mdast-util-find-and-replace
does not involve hast or user content
so there are no openings for cross-site scripting (XSS) attacks.
hast-util-find-and-replace
— find and replace in hasthast-util-select
— querySelector
, querySelectorAll
, and matches
unist-util-select
— select unist nodes with CSS-like selectorsSee contributing.md
in syntax-tree/.github
for
ways to get started.
See support.md
for ways to get help.
This project has a code of conduct. By interacting with this repository, organisation, or community you agree to abide by its terms.
FAQs
mdast utility to find and replace text in a tree
The npm package mdast-util-find-and-replace receives a total of 0 weekly downloads. As such, mdast-util-find-and-replace popularity was classified as not popular.
We found that mdast-util-find-and-replace demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.