Encode a URL into a percent-encoded form, leaving already-encoded sequences alone. Useful for safely encoding user-controlled URLs for cases like building HTML output or header values, without throwing errors. It percent-encodes non-URL code points as UTF-8 and avoids re-encoding characters like “%” when it is part of a valid escape sequence.
Project status
- The repository shows recent activity (upstream push on 2026-09-01), but the last published updates are older, with the most recent version being v2.0.0 on 2024-03-29, so maintenance looks partly active but with infrequent versioned updates.
- Apparent update cadence: after an initial period (2016), updates came in 2018 (v1.0.2) and then in 2024 (v2.0.0). This indicates a long release/update interval, even though there has been a recent upstream push.
AI summary generated
Recent updates
v2.0.0
v2.0.0 changes encodeurl's percent-encoding behavior to better align with the WHATWG URL specification. The release specifically focuses on stopping encoding for the characters backslash, caret, and pipe, which also addresses a security concern described in the release notes.
BreakingSecurityv1.0.2
Release v1.0.2 contains a fix for how the module encodes a trailing percent sign character. The core code change adjusts the URL-encoding regex, and the test suite is updated accordingly to reflect the new behavior.
v1.0.1
Release v1.0.1 contains a targeted fix for how the library handles unpaired surrogate code points when they occur at the beginning or end of the input string. The code change updates the surrogate-detection regular expression to correctly match these edge positions, and the test suite was expanded to cover those cases.
v1.0.0
This release is version 1.0.0 and is labeled as the initial release. No release notes details are provided beyond stating that the project is newly published.