Gathering detailed insights and metrics for entities
Gathering detailed insights and metrics for entities
Gathering detailed insights and metrics for entities
Gathering detailed insights and metrics for entities
encode & decode HTML & XML entities with ease & speed
npm install entities
Typescript
Module System
Min. Node Version
Node Version
NPM Version
99.7
Supply Chain
99.6
Quality
80.3
Maintenance
100
Vulnerability
100
License
TypeScript (99.8%)
JavaScript (0.2%)
Total Downloads
9,990,430,948
Last Day
10,978,928
Last Week
49,811,853
Last Month
222,121,973
Last Year
2,785,256,115
331 Stars
1,597 Commits
64 Forks
5 Watching
5 Branches
20 Contributors
Minified
Minified + Gzipped
Latest Version
6.0.0
Package Id
entities@6.0.0
Unpacked Size
527.75 kB
Size
109.72 kB
File Count
84
NPM Version
11.0.0
Node Version
23.5.0
Publised On
22 Dec 2024
Cumulative downloads
Total Downloads
Last day
-4.5%
10,978,928
Compared to previous day
Last week
-15.3%
49,811,853
Compared to previous week
Last month
4.6%
222,121,973
Compared to previous month
Last year
16.1%
2,785,256,115
Compared to previous year
Encode & decode HTML & XML entities with ease & speed.
entities
is used by many popular libraries; eg.
htmlparser2
, the official
AWS SDK and
commonmark
use it to process
HTML entities.entities
is the fastest library for decoding HTML entities (as of
April 2022); see performance.entities
npm install entities
entities
1const entities = require("entities"); 2 3// Encoding 4entities.escapeUTF8("& ü"); // "& ü" 5entities.encodeXML("& ü"); // "& ü" 6entities.encodeHTML("& ü"); // "& ü" 7 8// Decoding 9entities.decodeXML("asdf & ÿ ü '"); // "asdf & ÿ ü '" 10entities.decodeHTML("asdf & ÿ ü '"); // "asdf & ÿ ü '"
This is how entities
compares to other libraries on a very basic benchmark
(see scripts/benchmark.ts
, for 10,000,000 iterations; lower is better):
Library | Version | decode perf | encode perf | escape perf |
---|---|---|---|---|
entities | 3.0.1 | 1.418s | 6.786s | 2.196s |
html-entities | 2.3.2 | 2.530s | 6.829s | 2.415s |
he | 1.2.0 | 5.800s | 24.237s | 3.624s |
parse-entities | 3.0.0 | 9.660s | N/A | N/A |
What methods should I actually use to encode my documents?
If your target supports UTF-8, the escapeUTF8
method is going to be your best
choice. Otherwise, use either encodeHTML
or encodeXML
based on whether
you're dealing with an HTML or an XML document.
You can have a look at the options for the encode
and decode
methods to see
everything you can configure.
When should I use strict decoding?
When strict decoding, entities not terminated with a semicolon will be ignored. This is helpful for decoding entities in legacy environments.
Why should I use
entities
instead of alternative modules?
As of April 2022, entities
is a bit faster than other modules. Still, this is
not a very differentiated space and other modules can catch up.
More importantly, you might already have entities
in your dependency graph
(as a dependency of eg. cheerio
, or htmlparser2
), and including it directly
might not even increase your bundle size. The same is true for other entity
libraries, so have a look through your node_modules
directory!
Does
entities
support tree shaking?
Yes! entities
ships as both a CommonJS and a ES module. Note that for best
results, you should not use the encode
and decode
functions, as they wrap
around a number of other functions, all of which will remain in the bundle.
Instead, use the functions that you need directly.
This library wouldn't be possible without the work of these individuals. Thanks to
he
, which was one of the inspirations
for entities
parse5
projecthtml-entities
library. entities
would be quite a bit slower if there wasn't any competition. Right now
entities
is on top, but we'll see how long that lasts!License: BSD-2-Clause
To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.
entities
for enterpriseAvailable as part of the Tidelift Subscription
The maintainers of entities
and thousands of other packages are working with
Tidelift to deliver commercial support and maintenance for the open source
dependencies you use to build your applications. Save time, reduce risk, and
improve code health, while paying the maintainers of the exact dependencies you
use.
Learn more.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
license file detected
Details
Reason
SAST tool is run on all commits
Details
Reason
0 existing vulnerabilities detected
Reason
dependency not pinned by hash detected -- score normalized to 8
Details
Reason
Found 0/1 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
Reason
security policy file not detected
Details
Score
Last Scanned on 2025-01-27
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More