npmpackage.info

Gathering detailed insights and metrics for is-svg

Other packages similar to is-svg

svgo

4.0.0

SVGO is a Node.js library and command-line application for optimizing vector images.

@emotion/is-prop-valid

1.3.1

A function to check whether a prop is valid for HTML and SVG elements

echarts

5.6.0

Apache ECharts is a powerful, interactive charting and data visualization library for browser

is-svg-path

1.0.2

Detect if string an SVG path

Gathering detailed insights and metrics for is-svg

is-svg - 6.1.0 | npmpackage.info

is-svg

Check if a string or buffer is SVG

6.1.0

140

MIT

JavaScript

3.65 kB

4.6

Installations

npm install is-svg

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=20

Node Version

20.19.1

NPM Version

10.9.2 Pull Requests

Open

0

Total

21

Closed

6

Merged

15

Issues

Open

0

Total

17

Closed

17

Releases

v6.1.0

Updated on Jul 08, 2025

v6.0.0

Updated on Apr 29, 2025

v5.1.0

Updated on Aug 05, 2024

v5.0.1

Updated on May 14, 2024

v5.0.0

Updated on Feb 28, 2023

v4.4.0

Updated on Feb 28, 2023

View All 14 releases

Languages

JavaScript

TypeScript

JavaScript (97.26%)

TypeScript (2.74%)

Developer

sindresorhus

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

140 Stars

70 Commits

20 Forks

9 Watchers

1 Branches

14 Contributors

Updated on Jul 11, 2025

Sponsor this package

https://github.com/sponsors/sindresorhus

Maintainers

View All 14 Contributors

Package Meta Information

Latest Version

6.1.0

Package Id

is-svg@6.1.0

Unpacked Size

3.65 kB

Size

1.95 kB

File Count

NPM Version

10.9.2

Node Version

20.19.1

Published on

Jul 08, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@file-type/xml

Dev Dependencies

@types/node ava time-span tsd xo

is-svg

Check if a string is SVG

Install

1npm install is-svg

Usage

1import isSvg from 'is-svg';
2
3isSvg('<svg xmlns="http://www.w3.org/2000/svg"><path fill="#00CD9F"/></svg>');
4//=> true

API

isSvg(string, options?)

options

Type: object

validate

Type: boolean
Default: true

Whether to validate the SVG as proper XML.

Turning this off can improve performance significantly.

High

7.5/10

Summary

Regular Expression Denial of Service (ReDoS)

Affected Versions

>= 2.1.0, < 4.2.2

Patched Versions

4.2.2

High

7.5/10

Summary

ReDOS in IS-SVG

Affected Versions

>= 2.1.0, < 4.3.0

Patched Versions

4.3.0

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

5

Maintained

Determines if the project is "actively maintained".

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

4.6

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More