Gathering detailed insights and metrics for character-entities-legacy
Gathering detailed insights and metrics for character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
Installations
npm install character-entities-legacyScore
98.6
Supply Chain
99.4
Quality
75.6
Maintenance
100
Vulnerability
100
License
Developer
wooorm
Developer Guide
BETA
Module System
ESM
Min. Node Version
Typescript Support
Yes
Node Version
17.0.1
NPM Version
8.1.0
Statistics
4 Stars
73 Commits
1 Forks
4 Watching
1 Branches
2 Contributors
Updated on 08 Sept 2023
Bundle Size
1.03 kB
Minified
522.00 B
Minified + Gzipped
Languages
JavaScript (100%)
Total Downloads
Cumulative downloads
Total Downloads
1,683,105,836
Last day
-6.6%
1,693,826
Compared to previous day
Last week
3.1%
9,815,586
Compared to previous week
Last month
10.9%
40,904,925
Compared to previous month
Last year
4.4%
414,560,649
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon.
Contents
- What is this?
- When should I use this?
- Install
- Use
- API
- Types
- Compatibility
- Security
- Related
- Contribute
- License
What is this?
This is a list of certain named character references, that due to legacy
reasons, don’t need a trailing semicolon in HTML.
For example, © is perfectly fine for ©!
When should I use this?
Maybe when you’re writing an HTML parser or minifier, but otherwise probably
never!
Even then, it might be better to use parse-entities or
stringify-entities.
Install
This package is ESM only. In Node.js (version 14.14+, 16.0+), install with npm:
1npm install character-entities-legacy
In Deno with esm.sh:
1import {characterEntitiesLegacy} from 'https://esm.sh/character-entities-legacy@2'
In browsers with esm.sh:
1<script type="module"> 2 import {characterEntitiesLegacy} from 'https://esm.sh/character-entities-legacy@2?bundle' 3</script>
Use
1import {characterEntitiesLegacy} from 'character-entities-legacy' 2 3console.log(characterEntitiesLegacy.includes('copy')) // => true 4console.log(characterEntitiesLegacy.includes('frac34')) // => true 5console.log(characterEntitiesLegacy.includes('sup1')) // => true
API
This package exports the identifier characterEntitiesLegacy.
There is no default export.
characterEntitiesLegacy
List of (case sensitive) legacy character entity names (Array<string>).
wooorm/character-entities holds their decoded values.
See whatwg/html for more info.
Types
This package is fully typed with TypeScript. It exports no additional types.
Compatibility
This package is at least compatible with all maintained versions of Node.js. As of now, that is Node.js 14.14+ and 16.0+. It also works in Deno and modern browsers.
Security
This package is safe.
Related
wooorm/parse-entities— parse (decode) character referenceswooorm/stringify-entities— serialize (encode) character referenceswooorm/character-entities— info on character entitieswooorm/character-entities-html4— info on HTML4 character entitieswooorm/character-reference-invalid— info on invalid numeric character references
Contribute
Yes please! See How to Contribute to Open Source.
License
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: license:0
- Info: FSF or OSI recognized license: MIT License: license:0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/character-entities-legacy/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/character-entities-legacy/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/character-entities-legacy/main.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:15
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact 1.1.4 not signed: https://api.github.com/repos/wooorm/character-entities-legacy/releases/23097139
- Warn: release artifact 1.1.3 not signed: https://api.github.com/repos/wooorm/character-entities-legacy/releases/17213795
- Warn: release artifact 1.1.2 not signed: https://api.github.com/repos/wooorm/character-entities-legacy/releases/10605967
- Warn: release artifact 1.1.4 does not have provenance: https://api.github.com/repos/wooorm/character-entities-legacy/releases/23097139
- Warn: release artifact 1.1.3 does not have provenance: https://api.github.com/repos/wooorm/character-entities-legacy/releases/17213795
- Warn: release artifact 1.1.2 does not have provenance: https://api.github.com/repos/wooorm/character-entities-legacy/releases/10605967
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Score
3.1
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More