punyexpr 🦴

!no dependencies

🍁 Overview

A minimalist (5085 bytes) and safe expression compiler and evaluator.

🖥️ Demo

You can experiment with expressions here.

💿 How to install

* npm install punyexpr

* with ESM: import { punyexpor } from 'punyexpr'

* with CommonJS: const { punyexpr } = require('punyexpr')

* Types are included in the package

📚 Documentation

$3

``javascript
const incValue = punyexpr('value + 1')
`

$3

`javascript
incValue({ value: 1 }) // 2
`

$3

`javascript
const safebind = punybind.use({
compiler: punyexpr
})
// Use safebind to bind HTML
`

📚 Implementation notes

$3

* Regular expressions are not secure and are not allowed by default,

* Set the option { regex: true } to enable regular expressions using the default JavaScript implementation:

`javascript
const unsecure = punyexpr('value.match(/a+b/)', { regex: true })
`

* Or plug any custom regular expression builder:

`javascript
const unsecure = punyexpr('value.match(/a+b/)', { regex: (pattern, flags) => new RegExp(pattern, flags) })
`

$3

* Check the source for the implemented grammar,
in particular the following are not supported :
* Bitwise, async and coalesce operations
* new and this`
* Object literals
* See the types definitions for complete API,
* See the tests for supported expressions,
* The implementation is compliant with Content Security Policy.