Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
regex-utilities
Advanced tools
Tiny utilities that the regex library makes available for reuse in its plugins. Useful for parsing and processing regular expression syntax in a lightweight way, when you don't need a full regex AST.
Context
Frozen object with the following properties for tracking regex syntax context:
DEFAULT
- Base context.CHAR_CLASS
- Character class context.For all of the following functions, argument expression
is the target string, and needle
is the regex pattern to search for.
expression
(the string being searched through) is assumed to be a flag-v
-mode regex pattern string. In other words, nested character classes within it are supported when determining the context for a match.needle
(the regex pattern being searched for) is provided as a string, and is applied with flags su
.context
is not provided, matches are allowed in all contexts. In other words, inside and outside of character classes.replaceUnescaped
Arguments: expression, needle, replacement, [context]
Replaces all unescaped instances of a regex pattern in the given context, using a replacement string or function.
const str = '.\\.\\\\.[[\\.].].';
replaceUnescaped(str, '\\.', '@');
// → '@\\.\\\\@[[\\.]@]@'
replaceUnescaped(str, '\\.', '@', Context.DEFAULT);
// → '@\\.\\\\@[[\\.].]@'
replaceUnescaped(str, '\\.', '@', Context.CHAR_CLASS);
// → '.\\.\\\\.[[\\.]@].'
Details for the replacement
argument:
groups
, index
, etc.).context
and negated
) about where the match was found.execUnescaped
Arguments: expression, needle, [pos = 0], [context]
Returns a match object for the first unescaped instance of a regex pattern in the given context, or null
.
hasUnescaped
Arguments: expression, needle, [context]
Checks whether an unescaped instance of a regex pattern appears in the given context.
forEachUnescaped
Arguments: expression, needle, callback, [context]
Runs a function for each unescaped match of a regex pattern in the given context. The function receives two arguments:
groups
, index
, etc.).context
and negated
) about where the match was found.getGroupContents
Arguments: expression, contentsStartPos
Extracts the full contents of a group (subpattern) from the given expression, accounting for escaped characters, nested groups, and character classes. The group is identified by the position where its contents start (the string index just after the group's opening delimiter). Returns the rest of the string if the group is unclosed.
FAQs
Tiny helpers for processing regex syntax
The npm package regex-utilities receives a total of 303,035 weekly downloads. As such, regex-utilities popularity was classified as popular.
We found that regex-utilities demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.