View xpath on Snyk Open Source Advisor

Package Health Score

77 / 100

security
No known security issues
popularity
Influential project
maintenance
Sustainable
community
Sustainable

Explore Similar Packages

Security

No known security issues

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions

Version				Vulnerabilities	License Risk
0.0.34	\|	12/2023		0 C 0 H 0 M 0 L	0 H 0 M 0 L
0.0.32	\|	10/2020	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Influential project

Weekly Downloads (2,758,052)

GitHub Stars: 224
Forks: 71
Contributors: 30

Direct Usage Popularity

The npm package xpath receives a total of 2,758,052 downloads a week. As such, we scored xpath popularity level to be Influential project.

Based on project statistics from the GitHub repository for the npm package xpath, we found that it has been starred 224 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Sustainable

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 30
Funding: No

With more than 10 contributors for the xpath repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like xpath is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Sustainable

Commit Frequency

Open Issues: 12
Open PR: 9
Last Release: 11 months ago
Last Commit: 11 months ago

Further analysis of the maintenance status of xpath based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that xpath demonstrates a positive version release cadence with at least one new version released in the past 12 months.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: >=0.6.0

Age: 12 years
Dependencies: 0 Direct
Versions: 24
Install Size: 183 kB
Dist-tags: 1
# of Files: 5
Maintainers: 2
TS Typings: Yes

xpath has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Not sure how to use xpath?

To help you get started, we've collected the most common ways that xpath is being used within popular public projects.

socialtables / saml-protocol / test / sp-security-checklist.js View on Github

const chai = require("chai");
const chaiAsPromised = require("chai-as-promised");
chai.use(chaiAsPromised);
const should = chai.should(); // eslint-disable-line no-unused-vars

const xmldom = require("xmldom");
const xpath  = require("xpath");
const entityFixtures = require("./fixtures/entities");
const ModelStub      = require("./fixtures/model-stub");
//const samlFixtures   = require("./fixtures/saml");
const credentials = require("../lib/util/credentials");
const randomID    = require("../lib/util/random-id");
const signing     = require("../lib/util/signing");
const errors      = require("../lib/errors");
const namespaces  = require("../lib/namespaces");
const select      = xpath.useNamespaces(namespaces);
const moment      = require("moment");

/**
 * Tests for SP request construction and response handling for the
 * security-conscious. The protocol binding layer is tested seperately, as
 * its functionality is shared by both IDPs and SPs.
 */
describe("Service Provider security checklist", function() {

	const requestConstruction = require("../lib/request-construction");
	const responseConstruction = require("../lib/response-construction");
	const responseHandling = require("../lib/response-handling");

	let sp = entityFixtures.simpleSPWithCredentials;
	let idp = entityFixtures.simpleIDPWithCredentials;
	const idpWithLatency = entityFixtures.simpleIDPWithLatency;

View more ways to use xpath

xpath

DOM 3 XPath 1.0 implemention and helper for JavaScript, with node.js support.

Originally written by Cameron McCormack (blog).

Additional contributions from
Yaron Naveh (blog)
goto100
Thomas Weinert
Jimmy Rishe
and others

Install

Install with npm:

npm install xpath

xpath is xml engine agnostic but we recommend xmldom:

npm install @xmldom/xmldom

API Documentation

Can be found here. See below for example usage.

Your first xpath:

var xpath = require('xpath');
var dom = require('@xmldom/xmldom').DOMParser;

var xml = "<title>Harry Potter</title>";
var doc = new dom().parseFromString(xml, 'text/xml');
var nodes = xpath.select("//title", doc);

console.log(nodes[0].localName + ": " + nodes[0].firstChild.data);
console.log("Node: " + nodes[0].toString());

➡

title: Harry Potter
Node: <title>Harry Potter</title>

Alternatively

Using the same interface you have on modern browsers (MDN)

var node = null;
var xml = "<title>Harry Potter</title>";
var doc = new dom().parseFromString(xml, 'text/xml');
var result = xpath.evaluate(
    "/book/title",            // xpathExpression
    doc,                        // contextNode
    null,                       // namespaceResolver
    xpath.XPathResult.ANY_TYPE, // resultType
    null                        // result
);

node = result.iterateNext();
while (node) {
    console.log(node.localName + ": " + node.firstChild.data);
    console.log("Node: " + node.toString());

    node = result.iterateNext();
}

➡

title: Harry Potter
Node: <title>Harry Potter</title>

Evaluate string values directly:

var xml = "<title>Harry Potter</title>";
var doc = new dom().parseFromString(xml, 'text/xml');
var title = xpath.select("string(//title)", doc);

console.log(title);

➡

Harry Potter

Namespaces

var xml = "<title xmlns="myns">Harry Potter</title>";
var doc = new dom().parseFromString(xml, 'text/xml');
var node = xpath.select("//*[local-name(.)='title' and namespace-uri(.)='myns']", doc)[0];

console.log(node.namespaceURI);

➡

myns

Namespaces with easy mappings

var xml = "Harry Potter"
var select = xpath.useNamespaces({"bookml": "https://example.com/book"});

console.log(select('//bookml:title/text()', doc)[0].nodeValue);

➡

Harry Potter

Default namespace with mapping

var xml = "<title>Harry Potter</title>"
var select = xpath.useNamespaces({"bookml": "https://example.com/book"});

console.log(select('//bookml:title/text()', doc)[0].nodeValue);

➡

Harry Potter

Attributes

var xml = "<title>Harry Potter</title>";
var doc = new dom().parseFromString(xml, 'text/xml');
var author = xpath.select1("/book/@author", doc).value;

console.log(author);

➡

J. K. Rowling

License

MIT

xpath development dependencies

@xmldom/xmldom es-check func-xml mocha

FAQs

What is xpath?

DOM 3 XPath implemention and helper for node.js and the web. Visit Snyk Advisor to see a full health score report for xpath, including popularity, security, maintenance & community analysis.

Is xpath popular?

The npm package xpath receives a total of 2,758,052 weekly downloads. As such, xpath popularity was classified as an influential project. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is xpath well maintained?

We found indications that xpath maintenance is sustainable demonstrating some project activity. We saw a total of 30 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is xpath safe to use?

The npm package xpath was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 5 November-2024, at 13:43 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Explore Similar Packages

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (2,758,052)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Not sure how to use xpath?

xpath

Install

API Documentation

Your first xpath:

Alternatively

Evaluate string values directly:

Namespaces

Namespaces with easy mappings

Default namespace with mapping

Attributes

License

xpath development dependencies

FAQs

What is xpath?

Is xpath popular?

Is xpath well maintained?

Is xpath safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues