npmpackage.info

Gathering detailed insights and metrics for glob-parent

Other packages similar to glob-parent

@types/glob-parent

5.1.3

TypeScript definitions for glob-parent

@snyk/glob-parent

5.1.2-patch.1

Extract the non-magic parent path from a glob string.

normalize-glob

0.0.2

Normalize a glob pattern by expanding braces, making it absolute and resolving parent directories '..'

glob-possible-parent

1.0.0

Find out if a path can be a parent of a file you are looking for

Gathering detailed insights and metrics for glob-parent

glob-parent - 6.0.2 | npmpackage.info

glob-parent

Extract the non-magic parent path from a glob string.

6.0.2

ISC

JavaScript

912.00 B

19,310,326,982 4.2

Installations

npm install glob-parent

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>=10.13.0

Node Version

14.18.0

NPM Version

7.24.1 Score

99.6

Supply Chain

99.4

Quality

80.6

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

4

Total

32

Closed

9

Merged

19

Issues

Open

3

Total

30

Closed

27

Releases

glob-parent v6.0.2

v6.0.2

Updated on Sep 29, 2021

glob-parent v6.0.1

v6.0.1

Updated on Jul 20, 2021

glob-parent v6.0.0

v6.0.0

Updated on May 03, 2021

v5.1.2

Updated on Mar 06, 2021

v5.1.1

Updated on Jan 27, 2021

v5.1.0

Updated on Jan 27, 2021

View All 16 releases

Languages

JavaScript

JavaScript (100%)

Developer

gulpjs

Download Statistics

Total Downloads

19,310,326,982

Last Day

7,841,250

Last Week

126,779,844

Last Month

547,387,899

Last Year

5,309,610,652

GitHub Statistics

ISC License

80 Stars

89 Commits

45 Forks

14 Watchers

2 Branches

11 Contributors

Updated on Dec 07, 2024

Bundle Size

2.14 kB

Minified

912.00 B

Minified + Gzipped

Bundlephobia

Maintainers

View All 11 Contributors

Package Meta Information

Latest Version

6.0.2

Package Id

glob-parent@6.0.2

Size

3.37 kB

NPM Version

7.24.1

Node Version

14.18.0

Published on

Sep 29, 2021

Total Downloads

Cumulative downloads

Total Downloads

19,310,326,982

Dependencies

is-glob

Dev Dependencies

eslint eslint-config-gulp expect mocha nyc

glob-parent

Extract the non-magic parent path from a glob string.

Usage

1var globParent = require('glob-parent');
2
3globParent('path/to/*.js'); // 'path/to'
4globParent('/root/path/to/*.js'); // '/root/path/to'
5globParent('/*.js'); // '/'
6globParent('*.js'); // '.'
7globParent('**/*.js'); // '.'
8globParent('path/{to,from}'); // 'path'
9globParent('path/!(to|from)'); // 'path'
10globParent('path/?(to|from)'); // 'path'
11globParent('path/+(to|from)'); // 'path'
12globParent('path/*(to|from)'); // 'path'
13globParent('path/@(to|from)'); // 'path'
14globParent('path/**/*'); // 'path'
15
16// if provided a non-glob path, returns the nearest dir
17globParent('path/foo/bar.js'); // 'path/foo'
18globParent('path/foo/'); // 'path/foo'
19globParent('path/foo'); // 'path' (see issue #3 for details)

API

`globParent(maybeGlobString, [options])`

Takes a string and returns the part of the path before the glob begins. Be aware of Escaping rules and Limitations below.

options

1{
2  // Disables the automatic conversion of slashes for Windows
3  flipBackslashes: true;
4}

Escaping

The following characters have special significance in glob patterns and must be escaped if you want them to be treated as regular path characters:

? (question mark) unless used as a path segment alone
* (asterisk)
| (pipe)
( (opening parenthesis)
) (closing parenthesis)
{ (opening curly brace)
} (closing curly brace)
[ (opening bracket)
] (closing bracket)

Example

1globParent('foo/[bar]/'); // 'foo'
2globParent('foo/\\[bar]/'); // 'foo/[bar]'

Limitations

Braces & Brackets

This library attempts a quick and imperfect method of determining which path parts have glob magic without fully parsing/lexing the pattern. There are some advanced use cases that can trip it up, such as nested braces where the outer pair is escaped and the inner one contains a path separator. If you find yourself in the unlikely circumstance of being affected by this or need to ensure higher-fidelity glob handling in your library, it is recommended that you pre-process your input with expand-braces and/or expand-brackets.

Windows

Backslashes are not valid path separators for globs. If a path with backslashes is provided anyway, for simple cases, glob-parent will replace the path separator for you and return the non-glob parent path (now with forward-slashes, which are still valid as Windows path separators).

This cannot be used in conjunction with escape characters.

1// BAD
2globParent('C:\\Program Files \\(x86\\)\\*.ext'); // 'C:/Program Files /(x86/)'
3
4// GOOD
5globParent('C:/Program Files\\(x86\\)/*.ext'); // 'C:/Program Files (x86)'

If you are using escape characters for a pattern without path parts (i.e. relative to cwd), prefix with ./ to avoid confusing glob-parent.

1// BAD
2globParent('foo \\[bar]'); // 'foo '
3globParent('foo \\[bar]*'); // 'foo '
4
5// GOOD
6globParent('./foo \\[bar]'); // 'foo [bar]'
7globParent('./foo \\[bar]*'); // '.'

License

ISC

High

7.5/10

Summary

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Affected Versions

>= 4.0.0, < 5.1.2

Patched Versions

5.1.2

High

7.5/10

Summary

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

Affected Versions

= 6.0.0

Patched Versions

6.0.1

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

4.2

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to glob-parent

Other packages similar to glob-parent

glob-parent

Installations

Developer Guide

No

CommonJS

>=10.13.0

14.18.0

7.24.1

Score

Pull Requests

4

32

9

19

Issues

3

30

27

Releases

Languages

Developer

gulpjs

Download Statistics

GitHub Statistics

Bundle Size

2.14 kB

912.00 B

Maintainers

Package Meta Information

Total Downloads

19,310,326,982

Dependencies

Dev Dependencies

glob-parent

Usage

API

globParent(maybeGlobString, [options])

options

Escaping

Limitations

Braces & Brackets

Windows

License

10

10

10

10

10

2

0

0

0

0

0

0

0

4.2

/10

Weekly Downloads

Monthly Downloads

Yearly Downloads

`globParent(maybeGlobString, [options])`