Installations
npm install @borgar/simple-xml
Releases
Unable to fetch releases
Developer
borgar
Developer Guide
Module System
ESM
Min. Node Version
>=16.0.0
Typescript Support
Yes
Node Version
18.17.0
NPM Version
9.6.7
Statistics
12 Commits
1 Watching
5 Branches
1 Contributors
Updated on 02 Aug 2023
Languages
JavaScript (100%)
Total Downloads
Cumulative downloads
Total Downloads
45,112
Last day
-38.9%
11
Compared to previous day
Last week
90.2%
388
Compared to previous week
Last month
14.5%
1,517
Compared to previous month
Last year
-37.9%
11,402
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Overly simplistic XML parser
This is an overly simplistic non-validating XML parser with utilities. It will indiscriminately parse most well-formed XML documents that don't try to do anything clever.
The purpose of this library to allow easy parsing and consuming XML files. Does the world really need it? No, probably not. But all the other available packages the author tested were either a massive overkill or failed to parse fairly simplistic XML correctly. So here we are.
There are some limitations:
- Comments are discarded.
- Processing instructions are discarded.
- Namespace prefixes are preserved but otherwise ignored.
- Doctypes are discarded.
- Nested doctypes are not supported and will cause errors.
- Nodes have a limited interface.
- Made for a node.js environment with no browser build provided.
But on the upside:
- Built in selector engine.
- No dependencies.
Installing
The usual:
1$ npm i @borgar/simple-xml
Parsing XML
1import { parseXML } from '@borgar/simple-xml'; 2 3const dom = parseXML('<root><node>Lorem ipsum</node></root>'); 4console.log(dom.getElementsByTagName('node').textContent);
The parse function accepts two arguments, the first is an XML source. The second is an options object. There are two options:
Allow normally forbidden unquoted attributes with laxAttr
:
1parseXML('<root><node foo=bar /></root>', { laxAttr: true });
Allow normally forbidden "rootless" documents with emptyDoc
:
1parseXML('', { emptyDoc: true });
As well as a parse method, the package exports Node classes: Node, Element, Document, TextNode, and CDataNode. They are pretty much what you expect but with an incomplete or altered set of DOM API functions.
Nodes have the following methods and properties
Name & identity
-
.nodeName
An uppercase tag name. (BAR
in the case of<foo:bar>
) -
.tagName
A case preserved tag (bar
in the case of<foo:bar>
) -
.nodeType
A node type number (e.g.Element.ELEMENT_NODE === 1
) -
.ns
A namespace identifier (foo
in the case of<foo:bar>
) -
.fullName
A full tag name with identifier (foo:bar
in the case of<foo:bar>
)
Attributes
.getAttribute( attrName )
.setAttribute( attrName, attrValue )
.hasAttribute( attrName )
.removeAttribute( attrName )
Attributes are not stored as attribute nodes in a list, but rather they are a simple { name: value }
style object on the node.
Tree & traversal
-
.appendChild( Node )
Inserts a new node as the last child of a parent. If a node already has a parent, it is removed from that parent when inserted in the target. -
.children
Emits an array of direct child nodes that are of type Element. -
.parentNode
A direct reference to the node's container. -
.childNodes
An array of all direct child nodes. -
.textContent
Emits the text content of the target's subtree.Text is preserved as-is in the tree but whitespace is cleaned (unless
xml:space
dictates otherwise) when using.textContent
. -
.getElementsByTagName( tagName )
Lists all Elements in the target's subtree, traversal order, that have.tagName
equal to the argument. Function is case-sensitive. -
.querySelectorAll( cssSelector )
Lists all Elements in the target's subtree, traversal order, that match the supplied CSS selector. Function should be case-sensitive but may be case insensitive for some. -
.toJS()
Returns the target node's subtree in a JsonML-like structure.
Roughly, if you supply this:
1<x:tag foo="bar">Text content</x:tag>
It will parse to a document which has a .root
node looking roughly like this:
1{ 2 nodeType: 1, 3 nodeName: 'TAG', 4 ns: 'x', 5 tagName: 'tag', 6 fullName: 'x:tag', 7 attr: { 'foo': 'bar' } 8 parentNode: null, 9 childNodes = [ 10 { 11 nodeName: '#text', 12 nodeType: 3, 13 value: 'Text content', 14 parentNode: {...}, 15 } 16 ] 17}
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
4 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Reason
Found 0/12 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Score
2.5
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More