@pnpm/text.sanitize 1100.0.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @pnpm/text.sanitize
+
+## 1100.0.0
+
+### Minor Changes
+
+- `pnpm stage approve` now approves several staged packages at once. Run it without a stage id to pick from the staged versions interactively, or pass a list of stage ids. The whole batch is approved with a single one-time password, and pnpm asks for a new one only once the registry stops accepting it. Inside a workspace, the selected packages are approved in dependency order, and a package whose workspace dependency could not be approved is skipped instead of being published against a dependency that never reached the registry.

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2015-2016 Rico Sta. Cruz and other contributors
+Copyright (c) 2016-2026 Zoltan Kochan and other contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,3 @@
+# @pnpm/text.sanitize
+
+> Strips control and formatting characters from text that reaches the terminal

package/lib/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Strips control and formatting characters from text embedded in a
+ * single-line field that reaches the terminal.
+ *
+ * Registry- and store-derived strings (package names, versions, tags,
+ * usernames) can carry escape sequences, bidi overrides, or zero-width
+ * joiners that make rendered output misrepresent what is installed or
+ * published, so every such string is filtered before it is printed.
+ *
+ * The TypeScript counterpart of the Rust `pnpm-text-sanitize` crate's
+ * `sanitize_inline`; the two strip the same characters.
+ */
+export declare function sanitizeInline(text: string): string;

package/lib/index.js

@@ -0,0 +1,28 @@
+/**
+ * The control and formatting characters {@link sanitizeInline} strips: C0/C1
+ * controls, soft hyphens, bidi overrides and isolates, zero-width joiners,
+ * and the other invisible formatting characters that can make a rendered
+ * line read as something else.
+ *
+ * Variation selectors are deliberately absent: they change how the character
+ * before them is drawn rather than where the rest of the line goes, and they
+ * are part of the emoji a package description may legitimately carry.
+ */
+// eslint-disable-next-line no-control-regex
+const CONTROL_AND_FORMAT_CHARACTERS = /[\u0000-\u001F\u007F-\u009F\u00AD\u0600-\u0605\u061C\u06DD\u070F\u0890\u0891\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB\u{110BD}\u{110CD}\u{13430}-\u{1343F}\u{1BCA0}-\u{1BCA3}\u{1D173}-\u{1D17A}\u{E0001}\u{E0020}-\u{E007F}]/gu;
+/**
+ * Strips control and formatting characters from text embedded in a
+ * single-line field that reaches the terminal.
+ *
+ * Registry- and store-derived strings (package names, versions, tags,
+ * usernames) can carry escape sequences, bidi overrides, or zero-width
+ * joiners that make rendered output misrepresent what is installed or
+ * published, so every such string is filtered before it is printed.
+ *
+ * The TypeScript counterpart of the Rust `pnpm-text-sanitize` crate's
+ * `sanitize_inline`; the two strip the same characters.
+ */
+export function sanitizeInline(text) {
+    return text.replace(CONTROL_AND_FORMAT_CHARACTERS, '');
+}
+//# sourceMappingURL=index.js.map

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@pnpm/text.sanitize",
+  "version": "1100.0.0",
+  "description": "Strips control and formatting characters from text that reaches the terminal",
+  "keywords": [
+    "pnpm",
+    "pnpm11",
+    "sanitize"
+  ],
+  "license": "MIT",
+  "funding": "https://opencollective.com/pnpm",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/pnpm/pnpm/tree/main/pnpm11/text/sanitize"
+  },
+  "homepage": "https://github.com/pnpm/pnpm/tree/main/pnpm11/text/sanitize#readme",
+  "bugs": {
+    "url": "https://github.com/pnpm/pnpm/issues"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": "./lib/index.js"
+  },
+  "files": [
+    "lib",
+    "!*.map"
+  ],
+  "devDependencies": {
+    "@jest/globals": "30.4.1",
+    "@pnpm/text.sanitize": "1100.0.0"
+  },
+  "engines": {
+    "node": ">=22.13"
+  },
+  "jest": {
+    "preset": "@pnpm/jest-config"
+  },
+  "scripts": {
+    "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\"",
+    "test": "pn compile && pn .test",
+    "compile": "tsgo --build && pn lint --fix",
+    ".test": "cross-env NODE_OPTIONS=\"$NODE_OPTIONS --experimental-vm-modules --disable-warning=ExperimentalWarning --disable-warning=DEP0169\" jest"
+  }
+}