← Home

fill-range

Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`

32
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

es128paulmillrjonschlinkertdoowb

Keywords

alphaalphabeticalarraybashbraceexpandexpansionfillglobmatchmatchesmatchingnumbernumericalrangerangesregexsh

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:extend-shallow AI (dependencies): extend-shallow is a well-known, legitimate shallow-merge utility by jonschlinkert; stable false positive for this package. ai
dependencies unvetted-dep:alphabet AI (dependencies): alphabet is a semantically appropriate dependency for fill-range (letter/number range filling). Addition is consistent with package purpose and author's track record. ai
maintainer-change maintainer-added AI (maintainer-change): paulmillr is a well-known reputable developer; his addition as contributor is reflected in package.json and consistent with legitimate collaboration in this ecosystem. ai
phantom-deps phantom-dep:alphabet AI (phantom-deps): alphabet is a declared dependency appropriate for this package's purpose (alphabetical range filling); phantom-dep finding is a stable false positive for fill-range. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require is in benchmark/check.js only — a dev-only benchmark utility iterating over code samples. Not in production code; no risk to package consumers. ai
provenance no-provenance AI (provenance): Package predates Sigstore provenance; no provenance is expected for this era of publishing. ai

Versions (showing 32 of 32)

Version Deps Published
7.1.1 1 / 3
7.0.1 1 / 2
7.0.0 1 / 2
6.0.0 2 / 5
5.0.0 4 / 5
4.0.0 4 / 5
3.1.1 4 / 5
3.1.0 4 / 5
3.0.3 4 / 2
3.0.2 4 / 2
3.0.1 4 / 2
3.0.0 4 / 2
2.2.4 5 / 4
2.2.3 5 / 3
2.2.2 5 / 3
2.2.1 5 / 3
2.2.0 5 / 3
2.1.0 5 / 3
2.0.0 5 / 3
1.9.0 5 / 3
1.8.0 5 / 3
1.7.1 4 / 3
1.7.0 4 / 3
1.6.0 4 / 3
1.5.0 3 / 3
1.4.0 4 / 3
1.3.0 4 / 3
1.2.0 3 / 3
1.1.0 3 / 3
1.0.0 3 / 3
0.1.1 1 / 2
0.1.0 1 / 2