glob-parent extracts the non-magic parent path from a glob string, returning the part of the path before the glob begins. It is useful when you need to determine the directory prefix for a pattern (for example, to build paths or decide where a glob applies), with options for handling Windows slashes.
Project status
- Maintenance status: The source appears quiet/dormant, with the last published
glob-parentupdates in 2021 (latest shown is v6.0.2 on 2021-09-29). A GitHub upstream push occurred on 2024-07-26, but there are no recent published updates shown since 2021, suggesting no ongoing release cadence. - Update cadence (apparent): Activity was concentrated in early to mid 2021, including multiple security and behavioral updates (for example, ReDoS fixes in v5.1.2 (2021-03-06) and v6.0.1 (2021-07-20)), followed by a long gap with no evidenced updates through today (2026-06-09).
AI summary generated
Recent updates
v6.0.2
glob-parent v6.0.2 claims a performance improvement. The code changes focus on how glob-like patterns are detected and stripped from the input string, and the package also bumps a dependency version.
v6.0.1
glob-parent v6.0.1 ships a security-focused fix for a ReDoS vulnerability (CVE-2021-35065). The code changes replace the previous enclosure-detection regex logic and add performance regression tests to ensure processing remains fast for malicious inputs.
Securityv6.0.0
glob-parent v6.0.0 fixes glob-parent handling of escaped path separators and updates the project scaffold/tooling. The runtime change is in index.js where the internal regexes that detect enclosure/glob sections and escaped characters were adjusted, and the repo drops older Node support as part of a larger maintenance update.
Breakingv5.1.2
Release v5.1.2 contains a security-focused bug fix aimed at eliminating a ReDoS vulnerability. The code change simplifies a regular expression used in glob-parent computation and adds a regression test to ensure the problematic pattern does not hang.
Securityv5.1.1
v5.1.1 contains a small code fix in glob-parent’s escaping/unescaping logic and adds a corresponding unit test. It also updates CI configuration and the devDependency used for coverage reporting, which are not described in the release notes.
v5.1.0
Release v5.1.0 adds a new `flipBackslashes` option to control the automatic conversion of Windows backslashes to forward slashes inside `glob-parent`. The implementation updates the exported function to accept an `opts` object and gates the Windows separator flipping based on that option.
Featuresv5.0.0
v5.0.0 primarily updates minimum Node support to Node >= 6. The actual code change also removes the path-dirname dependency and switches the runtime logic to use Node's built-in path.posix.dirname, alongside CI and dev-dependency updates.
Breakingv4.0.0
glob-parent v4.0.0 introduces a breaking behavioral change around how unescaped question marks are interpreted when extracting the non-glob parent path, and it upgrades the is-glob dependency. The release also includes internal performance-oriented refactoring by hoisting regexes/constants, plus broader test and CI tooling updates.
Breakingv3.1.0
glob-parent v3.1.0 enhances how it strips glob magic, with specific improvements for Windows-style paths, extglobs, and nested brace/bracket expressions. The release notes also include a bug fix for trailing escaped square brackets.
Featuresv3.0.1
v3.0.1 updates glob-parent to use the path-dirname ponyfill and adjusts how escaped glob metacharacters are handled in the returned parent path. The code change also updates test/CI tooling and bumps dependencies to newer versions.
Features