Gathering detailed insights and metrics for decode-named-character-reference
Gathering detailed insights and metrics for decode-named-character-reference
Decode named character references
Installations
npm install decode-named-character-referenceDeveloper
wooorm
Developer Guide
BETA
Module System
ESM
Min. Node Version
Typescript Support
Yes
Node Version
18.2.0
NPM Version
8.9.0
Statistics
13 Commits
5 Forks
3 Watching
1 Branches
1 Contributors
Updated on 08 Sept 2023
Bundle Size
28.34 kB
Minified
11.24 kB
Minified + Gzipped
Languages
JavaScript (100%)
Total Downloads
Cumulative downloads
Total Downloads
364,307,463
Last day
1.3%
1,038,677
Compared to previous day
Last week
5.7%
5,447,271
Compared to previous week
Last month
15.2%
22,499,067
Compared to previous month
Last year
80.8%
208,591,575
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Versions
decode-named-character-reference
Decode named character references.
Contents
- What is this?
- When should I use this?
- Install
- Use
- API
- Types
- Compatibility
- Security
- Related
- Contribute
- License
What is this?
A workaround for webpack.
When should I use this?
Never use this.
Use parse-entities.
It uses this.
Install
This package is ESM only. In Node.js (version 14.14+, 16.0+), install with npm:
1npm install decode-named-character-reference
In Deno with esm.sh:
1import {decodeNamedCharacterReference} from 'https://esm.sh/decode-named-character-reference@1'
In browsers with esm.sh:
1<script type="module"> 2 import {decodeNamedCharacterReference} from 'https://esm.sh/decode-named-character-reference@1?bundle' 3</script>
Use
1import {decodeNamedCharacterReference} from 'decode-named-character-reference' 2 3decodeNamedCharacterReference('amp') //=> '&'
API
This package exports the identifier decodeNamedCharacterReference.
There is no default export.
decodeNamedCharacterReference(value)
Again, use parse-entities.
Types
This package is fully typed with TypeScript. It exports no additional types.
Compatibility
This package is at least compatible with all maintained versions of Node.js. As of now, that is Node.js 14.14+ and 16.0+. It also works in Deno and modern browsers.
Security
This package is safe.
Related
parse-entities— parse (decode) HTML character references
Contribute
Yes please! See How to Contribute to Open Source.
License
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: license:0
- Info: FSF or OSI recognized license: MIT License: license:0
Reason
Found 0/13 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Info: no jobLevel write permissions found
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/decode-named-character-reference/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/decode-named-character-reference/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/wooorm/decode-named-character-reference/main.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:15
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Score
3.4
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More