Gathering detailed insights and metrics for character-entities
Gathering detailed insights and metrics for character-entities
Installations
npm install character-entitiesDeveloper
wooorm
Developer Guide
BETA
Module System
ESM
Min. Node Version
Typescript Support
Yes
Node Version
18.2.0
NPM Version
8.9.0
Statistics
10 Stars
84 Commits
1 Forks
3 Watching
1 Branches
2 Contributors
Updated on 27 Nov 2024
Bundle Size
28.27 kB
Minified
11.18 kB
Minified + Gzipped
Languages
JavaScript (100%)
Total Downloads
Cumulative downloads
Total Downloads
1,831,469,780
Last day
-0.6%
2,162,649
Compared to previous day
Last week
4.7%
11,438,511
Compared to previous week
Last month
15.8%
47,469,349
Compared to previous month
Last year
9.4%
494,292,570
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
character-entities
Map of named character references.
Contents
- What is this?
- When should I use this?
- Install
- Use
- API
- Data
- Types
- Compatibility
- Security
- Related
- Contribute
- License
What is this?
This is a map of named character references in HTML (latest) to the characters they represent.
When should I use this?
Maybe when you’re writing an HTML parser or minifier, but otherwise probably
never!
Even then, it might be better to use parse-entities or
stringify-entities.
Install
This package is ESM only. In Node.js (version 16.0+), install with npm:
1npm install character-entities
In Deno with esm.sh:
1import {characterEntities} from 'https://esm.sh/character-entities@2'
In browsers with esm.sh:
1<script type="module"> 2 import {characterEntities} from 'https://esm.sh/character-entities@2?bundle' 3</script>
Use
1import {characterEntities} from 'character-entities' 2 3console.log(characterEntities.AElig) // => 'Æ' 4console.log(characterEntities.aelig) // => 'æ' 5console.log(characterEntities.amp) // => '&'
API
This package exports the identifier
characterEntities.
There is no default export.
characterEntities
Map between (case-sensitive) character entity names to replacements
(Record<string, string>).
Data
See html.spec.whatwg.org for more info.
Types
This package is fully typed with TypeScript. It exports no additional types.
Compatibility
This package is at least compatible with all maintained versions of Node.js. As of now, that is Node.js 16.0+. It also works in Deno and modern browsers.
Security
This package is safe.
Related
parse-entities— decode character referencesstringify-entities— encode character referencescharacter-entities-html4— info on named character references in HTML 4character-reference-invalid— info on invalid numeric character referencescharacter-entities-legacy— info on legacy named character references
Contribute
Yes please! See How to Contribute to Open Source.
License
MIT © Titus Wormer
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: license:0
- Info: FSF or OSI recognized license: MIT License: license:0
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/character-entities/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/character-entities/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/character-entities/main.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:15
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact 1.2.4 not signed: https://api.github.com/repos/wooorm/character-entities/releases/23098504
- Warn: release artifact 1.2.3 not signed: https://api.github.com/repos/wooorm/character-entities/releases/17213704
- Warn: release artifact 1.2.4 does not have provenance: https://api.github.com/repos/wooorm/character-entities/releases/23098504
- Warn: release artifact 1.2.3 does not have provenance: https://api.github.com/repos/wooorm/character-entities/releases/17213704
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Score
3.1
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More