
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This package provides a very lightweight, forgiving XML parser. It's 100% JavaScript and while it is Node-compliant it has no package dependencies.
Include pjxml.js then call the parse() method. For a full example, see the index.html demo page in the pjxml GitHub repository.
var xml = '<document attribute="value"><name>David Bowie</name></document>';
var doc = pjXML.parse(xml);
Install the pjxml package, then include it using require.
var pjXML = require('pjxml');
var xml = '<document attribute="value"><name>David Bowie</name></document>';
var doc = pjXML.parse(xml)
The parse() function returns a hierarchical object tree with each element mapped
to one object. The text and element contents of each element are stored in an array in the
content property. Any attributes are in the attributes property.
The select function supports a very minimal XPath selection syntax. It returns an array of all elements that match the path given. If only one node matches,
it returns a single node instead of an array. The selectAll method
always returns an array.
The // operator matches recursively.
For example:
var el = doc.selectAll('//name');
returns
[{"type":1,"content":["David Bowie"],"name":"name","attributes":{}}]
The text() method returns all text content for a given element and its children:
console.log(doc.text());
returns
David Bowie
The xml() method returns valid XML for any given document or element object.
console.log(doc.xml());
returns
<document attribute="value"><name>David Bowie</name></document>
FAQs
Pure JavaScript XML parser.
We found that pjxml demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.