npmpackage.info

Gathering detailed insights and metrics for glob-parent

glob-parent

Extract the non-magic parent path from a glob string.

6.0.2

ISC

JavaScript

16,420,135,322 4.2

Installations

npm install glob-parent

Score

99.2

Supply Chain

99.4

Quality

80.6

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

4

Total

32

Closed

9

Merged

19

Issues

Open

3

Total

30

Closed

27

Releases

glob-parent v6.0.2

v6.0.2

Published on 29 Sept 2021

glob-parent v6.0.1

v6.0.1

Published on 20 Jul 2021

glob-parent v6.0.0

v6.0.0

Published on 03 May 2021

v5.1.2

Published on 06 Mar 2021

v5.1.1

Published on 27 Jan 2021

v5.1.0

Published on 27 Jan 2021

View all 16 releases

Developer

gulpjs

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

>=10.13.0

Typescript Support

No

Node Version

14.18.0

NPM Version

7.24.1 Statistics

79 Stars

89 Commits

46 Forks

15 Watching

2 Branches

11 Contributors

Updated on 29 Aug 2024

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

16,420,135,322

Last day

-6.7%

19,430,402

Compared to previous day

Last week

1.6%

113,287,941

Compared to previous week

Last month

12.7%

464,850,345

Compared to previous month

Last year

16.5%

4,605,470,936

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

is-glob

Dev Dependencies

eslint eslint-config-gulp expect mocha nyc

Versions

glob-parent

Extract the non-magic parent path from a glob string.

Usage

1var globParent = require('glob-parent');
2
3globParent('path/to/*.js'); // 'path/to'
4globParent('/root/path/to/*.js'); // '/root/path/to'
5globParent('/*.js'); // '/'
6globParent('*.js'); // '.'
7globParent('**/*.js'); // '.'
8globParent('path/{to,from}'); // 'path'
9globParent('path/!(to|from)'); // 'path'
10globParent('path/?(to|from)'); // 'path'
11globParent('path/+(to|from)'); // 'path'
12globParent('path/*(to|from)'); // 'path'
13globParent('path/@(to|from)'); // 'path'
14globParent('path/**/*'); // 'path'
15
16// if provided a non-glob path, returns the nearest dir
17globParent('path/foo/bar.js'); // 'path/foo'
18globParent('path/foo/'); // 'path/foo'
19globParent('path/foo'); // 'path' (see issue #3 for details)

API

`globParent(maybeGlobString, [options])`

Takes a string and returns the part of the path before the glob begins. Be aware of Escaping rules and Limitations below.

options

1{
2  // Disables the automatic conversion of slashes for Windows
3  flipBackslashes: true;
4}

Escaping

The following characters have special significance in glob patterns and must be escaped if you want them to be treated as regular path characters:

? (question mark) unless used as a path segment alone
* (asterisk)
| (pipe)
( (opening parenthesis)
) (closing parenthesis)
{ (opening curly brace)
} (closing curly brace)
[ (opening bracket)
] (closing bracket)

Example

1globParent('foo/[bar]/'); // 'foo'
2globParent('foo/\\[bar]/'); // 'foo/[bar]'

Limitations

Braces & Brackets

This library attempts a quick and imperfect method of determining which path parts have glob magic without fully parsing/lexing the pattern. There are some advanced use cases that can trip it up, such as nested braces where the outer pair is escaped and the inner one contains a path separator. If you find yourself in the unlikely circumstance of being affected by this or need to ensure higher-fidelity glob handling in your library, it is recommended that you pre-process your input with expand-braces and/or expand-brackets.

Windows

Backslashes are not valid path separators for globs. If a path with backslashes is provided anyway, for simple cases, glob-parent will replace the path separator for you and return the non-glob parent path (now with forward-slashes, which are still valid as Windows path separators).

This cannot be used in conjunction with escape characters.

1// BAD
2globParent('C:\\Program Files \\(x86\\)\\*.ext'); // 'C:/Program Files /(x86/)'
3
4// GOOD
5globParent('C:/Program Files\\(x86\\)/*.ext'); // 'C:/Program Files (x86)'

If you are using escape characters for a pattern without path parts (i.e. relative to cwd), prefix with ./ to avoid confusing glob-parent.

1// BAD
2globParent('foo \\[bar]'); // 'foo '
3globParent('foo \\[bar]*'); // 'foo '
4
5// GOOD
6globParent('./foo \\[bar]'); // 'foo [bar]'
7globParent('./foo \\[bar]*'); // '.'

License

ISC

Stable Version

The latest stable version of the package.

Stable Version

6.0.2

HIGH

7.5/10

Summary

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Affected Versions

>= 4.0.0, < 5.1.2

Patched Versions

5.1.2

HIGH

7.5/10

Summary

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

Affected Versions

= 6.0.0

Patched Versions

6.0.1

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

4.2

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More