
Security News
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.
js-regex
Advanced tools
A compatibility layer to use Javascript regular expressions in Python.
Did you know that regular expressions may vary between programming languages?
For example, let's consider the pattern "^abc$", which matches the string
"abc". But what about the string "abc\n"? It's also matched in Python,
but not in Javascript!
This and other slight differences can be really important for cross-language
standards like jsonschema, and that's why js-regex exists.
import re
import js_regex
re.compile("^abc$").search("abc\n") # matches, unlike JS
js_regex.compile("^abc$").search("abc\n") # does not match
Internally, js_regex.compile() replaces JS regex syntax which has a different
meaning in Python with whatever Python regex syntax has the intended meaning.
This only works for the .search() method - there is no equivalent to
.match() or .fullmatch() for Javascript regular expressions.
We also check for constructs which are valid in Python but not JS - such as
named capture groups - and raise an explicit error. Constructs which are valid
in JS but not Python may also raise an error, because we're still using Python's
re.compile() function under the hood!
The following table is adapted from this larger version, ommiting other languages and any rows where JS and Python have the same behaviour.
| Feature | Javascript | Python | Handling |
|---|---|---|---|
\a (bell) | no | yes | Converted to JS behaviour |
\ca-\cz and \cA-\cZ (control characters) | yes | no | Converted to JS behaviour |
\d for digits, \w for word chars, \s for whitespace | ascii | unicode | Converted to JS behaviour (including \D, \W, \S for negated classes) |
$ (end of line/string) | at end | allows trailing \n | Converted to JS behaviour |
\A (start of string) | no | yes | Explicit error, use ^ instead |
\Z (end of string) | no | yes | Explicit error, use $ instead |
(?<=text) (positive lookbehind) | new in ES2018 | yes | Allowed |
(?<!text) (negative lookbehind) | new in ES2018 | yes | Allowed |
(?(1)then|else) | no | yes | Explicit error |
(?(group)then|else) | no | yes | Explicit error |
(?#comment) | no | yes | Explicit error |
(?P<name>regex) (Python named capture group) | no | yes | Not detected (yet) |
(?P=name) (Python named backreference) | no | yes | Not detected (yet) |
(?<name>regex) (JS named capture group) | new in ES2018 | no | Error from Python, not translated (yet) |
$<name> (JS named backreference) | new in ES2018 | no | Error from Python, not translated (yet) |
(?i) (case insensitive) | /i only | yes | Explicit error, compile with flags=re.IGNORECASE instead |
(?m) (^ and $ match at line breaks) | /m only | yes | Explicit error, compile with flags=re.MULTILINE instead |
(?s) (dot matches newlines) | no | yes | Explicit error, compile with flags=re.DOTALL instead |
(?x) (free-spacing mode) | no | yes | Explicit error, there is no corresponding mode in Javascript |
| Backreferences non-existent groups are an error | no | yes | Follows Python behaviour |
| Backreferences to failed groups also fail | no | yes | Follows Python behaviour |
Nested references \1 through \9 | yes | no | Follows Python behaviour |
Note that in many cases Python-only regex features would be treated as part of an ordinary pattern by JS regex engines. Currently we raise an explicit error on such inputs, but may translate them to have the JS behaviour in a future version.
jsonschema patterns are supported and all Python-side incompatibilities
are detected.re.compile$, e.g. in "^abc$|^def$" both are convertedre.LOCALE and re.VERBOSE flags, which have no JS equivalentConvert JS-only syntax to Python equivalent wherever possible.
Initial release, with project setup and a very basic implementation.
FAQs
A thin compatibility layer to use Javascript regular expressions in Python
We found that js-regex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.