is-unsafe
npmv2.0.0TypeScriptZero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts
Overview
is-unsafe is an npm package that zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts. The latest version is 2.0.0, released under the MIT license.
Who should use it
Teams working in the npm ecosystem who need zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts and value a focused solution.
When not to use it
Consider an alternative if you need to or if a more actively-maintained option better fits your npm stack.
Pros
- Ships TypeScript type definitions.
- Clear open-source license (MIT).
- Lean dependency tree (1 direct dependencies).
Cons
- No significant drawbacks detected from available metadata.
Auto-generated from collected registry metadata. No external claims are inferred.
Relationship graph
Dependencies (left) and dependents (right) of is-unsafe.
Dependencies
Dev (1)
Used by
Popular packages that depend on is-unsafe.
Alternatives to is-unsafe
Entity parser for XML, HTML, External entites with security and NCR control
Validate XML, Parse XML, Build XML without C/C++ based libraries
Check if a filename is safe to use in a path join operation
The fast, flexible & elegant library for parsing and manipulating HTML and XML.
render domhandler DOM nodes to a string
Lightweight debugging utility for Node.js and the browser
Escape string for use in HTML
Colored symbols for various log levels. Example: `✔︎ Success`
Sniff the encoding from a HTML byte stream
Validates whether a string matches the production for an XML name or qualified name
A per-spec XML serializer implementation
An XML builder for node.js
Frequently installed together
TypeScript definitions for node
An AST-based pattern checker for JavaScript.
Prettier is an opinionated code formatter
Externalise references to helpers and builtins, automatically polyfilling your code without polluting globals
Entity parser for XML, HTML, External entites with security and NCR control
Build XML from JSON without C/C++ based libraries
Parse String to Number based on configuration
Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.
Validates XML name productions — Name, NCName, QName, NMToken, NMTokens — for XML 1.0 and 1.1
Version history
| Version | Published | License |
|---|---|---|
| 2.0.0latest | 10 days ago | MIT |
| 1.0.1 | 1 month ago | MIT |
| 1.0.0 | 1 month ago | MIT |
Maintainers
Funding
Frequently asked questions
How do I install is-unsafe?
Run `npm install is-unsafe` to add is-unsafe to your npm project.
What license is is-unsafe released under?
is-unsafe is distributed under the MIT license.
How popular is is-unsafe?
is-unsafe has approximately 0 downloads per week and 1 known dependent packages.