easier than regex string matching patterns for urls and other strings. turn strings into data or data into strings. 

url-pattern

Error

Ignore

Warn

License

Maintenance

Miscellaneous

Quality

Supply chain risk

Vulnerability

Admins only

Organization members

Dashboard

<upgradeLink>Upgrade</upgradeLink> to access this feature

About

Blog

Socket CLI

Customers

Socket Dependency Search

Docs

Socket for GitHub

Love

Impersonation Mode Active

Update your browser to the latest version for the best experience.

Your web browser is outdated

Use another browser for the best experience.

Your web browser is unsupported

{{count, number}} commits last two months

{{count, number}} critical severity alert

{{count, number}} critical severity alerts

{{count, number}} dependency vulnerability

{{count, number}} dependency vulnerabilities

{{count, number}} development dependencies

{{count, number}} transitive dependencies

{{count, number}} version published last month

{{count, number}} versions published last month

{{count, number}} version published in last two months

{{count, number}} versions published in last two months

{{count, number}} version published last week

{{count, number}} versions published last week

{{count, number}} version published last year

{{count, number}} versions published last year

Socket undergoes annual SOC2 Type II audits. Socket customers can request a copy of the full SOC2 Type II report.

Allows organization owners and admins to access detailed records of actions taken by members of their organization, complete with timestamps.

Prevent compromised packages from infiltrating your supply chain by monitoring for changes in real-time.

Join our Discord community to get help from Socket engineers and other Socket users.

Compare millions of open source packages on socket.dev

Detect malicious code and risky behavior (e.g. network) in your dependencies using "deep package inspection"

All data is encrypted in transit and at rest using industry standard encryption algorithms.

Get a dedicated Socket account manager and access to Socket’s Customer Success team.

Get dedicated support from Socket engineers via email and Slack.

"Shift left" with the Socket Chrome extension and give intervene early, before developers choose risky or low quality dependencies.

Catch developers using risky dependencies and give them a "speed bump" to encourage good behavior

Install the Socket GitHub app to receive real-time dependency scanning and reports with every pull request.

Integrate Socket into your GitHub SCM to prevent risky dependencies from being installed.

Socket scans for vulnerabilities in your dependencies, including CVEs, security advisories, and more.

Socket supports dependencies in many languages, with most popular ecosystems coming in 2024. We've got you covered no matter what languages you use.

Enforce license policies across your organization

Receive a Microsoft Teams message to the channel of your choice anytime Socket runs a new analysis, has a new finding, or a policy has changed.

Get help migrating from Socket's free plan to Socket's paid plans.

Run Socket on-premises or in your own cloud environment.

Query for any dependency (at any version) across your entire organization

Integrate Socket into your CI/CD pipeline to prevent risky dependencies from being deployed to production.

Analyze an entire project to find supply chain risks

Tag projects to organize and filter your projects

Restrict access based on the roles of individual users within an organization.

Receive a Slack message to the channel of your choice anytime Socket runs a new analysis, has a new finding, or a policy has changed.

Socket is SOC2 Type II compliant and undergoes annual audits.

The Socket CLI allows teams to prevent risky dependencies from being installed, and to get dependency insights from the command line.

Socket supports SAML SSO for single sign-on and identity management.

Integrate Socket into your VS Code IDE to prevent risky dependencies from being installed.

Get a POST request anytime Socket runs a new analysis, has a new finding, or a policy has changed.

Socket will analyzed your SBOMs up to a maximum number of dependencies.

API that allows you to analyze a project, lookup package scores and alerts, and more.

Create API tokens to authenticate with the Socket API and CLI.

The number of developers in your team. A developer is someone who made a commit to your organization's repositories scanned by Socket in the past month.

Use Socket to protect your private repositories.

Socket is always free for open source projects.

Socket retains all reporting data for 3 months, 1 year, or a custom term of your choice.

Access the threat feed that powers Socket.

Unlimited scale, self-hosting, and priority support for large teams.

For open-source projects, individuals, and small teams.

For growing teams with enhanced scale, security, and support.

There is a package with a similar name that is downloaded much more often.

There are packages with similar names that are downloaded much more often.

This may not be the package you want!

Instance

Alert Locations

Package

The {{ecosystem}} package {{- packageName}} receives a total of <strong>{{numWeeklyDownloadCount, number}}</strong> weekly downloads. As such, {{- packageName}} popularity was classified as <strong>{{popularity}}</strong>.

Is {{- packageName}} popular?

Is {{- packageName}} safe to use?

Is {{- packageName}} well maintained?

What is {{- packageName}}?

{{packageDescription}}Version: {{versionString}} was published by {{publisherName}}. Start using Socket to analyze {{- packageName}} and its {{dependencyCount, number}} dependencies to secure your app from supply chain attacks.

Sorry, it seems this package was removed from the registry

Package was removed

This package version has been unpublished, mostly likely due to security reasons

Package version was removed

Provide a detailed description of the malware...

Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies.

Socket - Secure your dependencies. Ship with confidence.

Compare versions

{{- packageName}} - npm Package Compare versions

    constructor(pattern: string, options?: UrlPatternOptions);

    constructor(pattern: RegExp, groupNames?: string[]);

  "description": "easier than regex string matching patterns for urls and other strings. turn strings into data or data into strings.",

  "homepage": "http://github.com/snd/url-pattern",

      "url": "https://github.com/andreypopp"

      "url": "https://github.com/spicydonuts"

      "url": "https://github.com/k88hudson"

    "url": "http://github.com/snd/url-pattern/issues",

    "url": "git://github.com/snd/url-pattern.git"

    "compile": "coffee --bare --compile --output lib src",

    "test-with-coverage": "istanbul cover coffeetape test/* && cat ./coverage/coverage.json | ./node_modules/codecov.io/bin/codecov.io.js",

    "test-zuul-local": "zuul --local 8080 test/*"

[![NPM Package](https://img.shields.io/npm/v/url-pattern.svg?style=flat)](https://www.npmjs.org/package/url-pattern)

[![Build Status](https://travis-ci.org/snd/url-pattern.svg?branch=master)](https://travis-ci.org/snd/url-pattern/branches)

[![Sauce Test Status](https://saucelabs.com/buildstatus/urlpattern)](https://saucelabs.com/u/urlpattern)

[![codecov.io](http://codecov.io/github/snd/url-pattern/coverage.svg?branch=master)](http://codecov.io/github/snd/url-pattern?branch=master)

[![Downloads per Month](https://img.shields.io/npm/dm/url-pattern.svg?style=flat)](https://www.npmjs.org/package/url-pattern)

**easier than regex string matching patterns for urls and other strings.  

turn strings into data or data into strings.**

> This is a great little library -- thanks!  

> [michael](https://github.com/snd/url-pattern/pull/7)

[make pattern:](#make-pattern-from-string)

var pattern = new UrlPattern('/api/users(/:id)');

[match pattern against string and extract values:](#match-pattern-against-string)

pattern.match('/api/users/10'); // {id: '10'}

pattern.match('/api/products/5'); // null

[generate string from pattern and values:](#stringify-patterns)

pattern.stringify({id: 20}) // '/api/users/20'

- continuously tested in Node.js (0.12, 4.2.3 and 5.3) and all relevant browsers:

  [![Sauce Test Status](https://saucelabs.com/browser-matrix/urlpattern.svg)](https://saucelabs.com/u/urlpattern)

- [tiny single file with just under 500 lines of simple, readable, maintainable code](src/url-pattern.coffee)

  passing [![Build Status](https://travis-ci.org/snd/url-pattern.svg?branch=master)](https://travis-ci.org/snd/url-pattern/branches)

  with [![codecov.io](http://codecov.io/github/snd/url-pattern/coverage.svg?branch=master)](http://codecov.io/github/snd/url-pattern?branch=master)

- widely used [![Downloads per Month](https://img.shields.io/npm/dm/url-pattern.svg?style=flat)](https://www.npmjs.org/package/url-pattern)

- supports CommonJS, [AMD](http://requirejs.org/docs/whyamd.html) and browser globals

  - use [lib/url-pattern.js](lib/url-pattern.js) in the browser

  - sets the global variable `UrlPattern` when neither CommonJS nor [AMD](http://requirejs.org/docs/whyamd.html) are available.

- very fast matching as each pattern is compiled into a regex exactly once

- [customizable](#customize-the-pattern-syntax)

- [frequently asked questions](#frequently-asked-questions)

- bower package: `bower install url-pattern`

- pattern parser implemented using simple, combosable, testable [parser combinators](https://en.wikipedia.org/wiki/Parser_combinator)

[check out **passage** if you are looking for simple composable routing that builds on top of url-pattern](https://github.com/snd/passage)

> var UrlPattern = require('url-pattern');

> var pattern = new UrlPattern('/v:major(.:minor)/*');

> var pattern = new UrlPattern('(http(s)\\://)(:subdomain.):domain.:tld(\\::port)(/*)')

> pattern.match('https://www.google.com');

{subdomain: 'www', domain: 'google', tld: 'com'}

> pattern.match('http://mail.google.com/mail');

{subdomain: 'mail', domain: 'google', tld: 'com', _: 'mail'}

> pattern.match('http://mail.google.com:80/mail');

{subdomain: 'mail', domain: 'google', tld: 'com', port: '80', _: 'mail'}

> var pattern = new UrlPattern('/api/users/:id');

a `pattern` is immutable after construction.  

patterns are compiled into regexes which makes `.match()` superfast.

`:id` (in the example above) is a named segment:

a named segment starts with `:` followed by the **name**.  

the **name** must be at least one character in the regex character set `a-zA-Z0-9`.

when matching, a named segment consumes all characters in the regex character set

a named segment match stops at `/`, `.`, ... but not at `_`, `-`, ` `, `%`...

[you can change these character sets. click here to see how.](#customize-the-pattern-syntax)

if a named segment **name** occurs more than once in the pattern string,

then the multiple results are stored in an array on the returned object:

> var pattern = new UrlPattern('/api/users/:ids/posts/:ids');

> pattern.match('/api/users/10/posts/5');

### optional segments, wildcards and escaping

## optional segments, wildcards and escaping

to make part of a pattern optional just wrap it in `(` and `)`:

  '(http(s)\\://)(:subdomain.):domain.:tld(/*)'

note that `\\` escapes the `:` in `http(s)\\://`.

you can use `\\` to escape `(`, `)`, `:` and `*` which have special meaning within

optional named segments are stored in the corresponding property only if they are present in the source string:

`*` in patterns are wildcards and match anything.

wildcard matches are collected in the `_` property:

if there is only one wildcard then `_` contains the matching string.

otherwise `_` contains an array of matching strings.

[look at the tests for additional examples of `.match`](test/match-fixtures.coffee)

> var pattern = new UrlPattern(/^\/api\/(.*)$/);

if the pattern was created from a regex an array of the captured groups is returned on a match:

you can pass an array of keys as the second argument.

returns objects on match with each key mapped to a captured value:

optional segments are only included in the output if they contain named segments

and/or wildcards and values for those are provided:

> var pattern = new UrlPattern('/api/users(/:id)');

wildcards (key = `_`), deeply nested optional groups and multiple value arrays should stringify as expected.

an error is thrown if a value that is not in an optional group is not provided.

an error is thrown if an optional segment contains multiple

*one provided value for an optional segment

makes all values in that optional segment required.*

[look at the tests for additional examples of `.stringify`](test/stringify-fixtures.coffee)

finally we can completely change pattern-parsing and regex-compilation to suit our needs:

let's change the char used for escaping (default `\\`):

let's change the char used to start a named segment (default `:`):

let's change the set of chars allowed in named segment names (default `a-zA-Z0-9`)

> options.segmentNameCharset = 'a-zA-Z0-9_-';

		@@ -8,3 +8,3 @@ interface UrlPatternOptions {
		optionalSegmentEndChar?: string;
		wildcardChar: string;
		wildcardChar?: string;
		}
		@@ -11,0 +11,0 @@

		{
		"name": "url-pattern",
		"version": "1.0.2",
		"version": "1.0.3",
		"description": "easier than regex string matching patterns for urls and other strings. turn strings into data or data into strings.",
		@@ -5,0 +5,0 @@ "keywords": [

		@@ -99,3 +99,3 @@ # url-pattern

		### make pattern from string
		## make pattern from string

		@@ -110,3 +110,3 @@ ```javascript

		### match pattern against string
		## match pattern against string

		@@ -129,3 +129,3 @@ match returns the extracted segments:

		### named segments
		## named segments

		@@ -152,3 +152,3 @@ `:id` (in the example above) is a named segment:

		### optional segments, wildcards and escaping
		## optional segments, wildcards and escaping

		@@ -192,3 +192,3 @@ to make part of a pattern optional just wrap it in `(` and `)`:

		### make pattern from regex
		## make pattern from regex

		@@ -229,3 +229,3 @@ ```javascript

		### stringify patterns
		## stringify patterns

		@@ -263,3 +263,3 @@ ```javascript

		### customize the pattern syntax
		## customize the pattern syntax

		@@ -332,5 +332,5 @@ finally we can completely change pattern-parsing and regex-compilation to suit our needs:

		### frequently asked questions
		## frequently asked questions

		#### how do i match the query part of an URL ?
		### how do i match the query part of an URL ?

		@@ -350,3 +350,3 @@ the query part of an URL has very different semantics than the rest.

		#### how do i match an IP ?
		### how do i match an IP ?

		@@ -358,4 +358,4 @@ you can't exactly match IPs with url-pattern so you have to

		### [contributing](contributing.md)
		## [contributing](contributing.md)

		### [license: MIT](LICENSE)
		## [license: MIT](LICENSE)

Worsened metrics