New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

unicode-confusables

Package Overview
Dependencies
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

unicode-confusables

Utility for finding confusing unicode in strings

latest
npmnpm
Version
0.1.1
Version published
Weekly downloads
69K
-20.64%
Maintainers
1
Weekly downloads
 
Created
Source

unicode-confusables

Utility for finding confusing unicode, sourced from unicode UTS39's confusables.txt.

Installation

$ npm install unicode-confusables

Usage


const { isConfusing, confusables, rectifyConfusion } = require('unicode-confusables')

// check if a string is confusing
> isConfusing('fоо')
true
> isConfusing('foo')
false

// get the confusing parts of the string and their similarities
> confusables('fоо')
[
  { point: 'f' },
  { point: 'о', similarTo: 'o' },
  { point: 'о', similarTo: 'o' }
]

// apply the similar parts to the original string
> rectifyConfusion('fоо')
'foo'

// also finds hidden zero-width unicode
> isConfusing('vitalik')
true
> confusables('vitalik')
[
  { point: 'v' },
  { point: 'i' },
  { point: 't' },
  { point: 'a' },
  { point: '', similarTo: '' },
  { point: 'l' },
  { point: 'i' },
  { point: 'k' }
]

// even works with japanese!
> confusables('半角カナ')
[
  { point: '半' },
  { point: '角' },
  { point: 'カ', similarTo: '力' },
  { point: 'ナ' }
]

// It also thinks some parts of ascii confusing
> confusables('mI01')
[
  { point: 'm', similarTo: 'rn' },
  { point: 'I', similarTo: 'l' },
  { point: '0', similarTo: 'O' },
  { point: '1', similarTo: 'l' }
]

Updating

Fetch and parse a fresh copy of confusables.txt

$ npm run update

License

MIT

FAQs

Package last updated on 10 Aug 2020

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts