Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
named-regexp
Advanced tools
Append named-capture feature to JavaScript RegExp
var named = require('named-regexp').named;
var re = named(/(:<foo>[a-z]+) (:<foo>[a-z]+) (:<bar>[a-z]+)/ig);
var matched = re.exec('aaa bbb ccc');
console.log(matched.captures); //=> { foo: [ 'aaa', 'bbb' ], bar: [ 'ccc' ] }
console.log(matched.capture('foo')); //=> 'bbb' // last matched
var replaced = re.replace('aaa bbb ccc ddd eee fff ggg', function (matched) {
return matched.capture('bar');
});
console.log(replaced); //=> 'ccc fff ggg');
named-regexp.js provides named
function which converts regexp containing named-captures to normal regexp which has some functions.
named-capture is defined by (:<name>regexp)
. You can't use it with normal captures. If you want to use grouping, use (?:regexp)
instead.
Takes RegExp object which contains named-captures.
Returns new RegExp object with following methods:
Performs a regexp match of string and returns an Array object containing the results of the match, or null if string did not match.
A returning Array object is same as value from normal RegExp.prototype.exec but it has captures
property and capture
method.
An object contains captured values which has capture name as key and array of captured string as its value.
Returns last matched string of the name.
Same as String.prototype.replace
but when replace
is function, this method passes an Array object like value returning from exec()
.
FAQs
Append named-capture feature to JavaScript RegExp
The npm package named-regexp receives a total of 229 weekly downloads. As such, named-regexp popularity was classified as not popular.
We found that named-regexp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.