← Home

wrap-ansi

Wordwrap a string with ANSI escape codes

21
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

sindresorhus

Keywords

wrapbreakwordwrapwordbreaklinewrapansistylescolorcolourcolorsterminalconsoleclistringttyescapeformattingrgb256shellxtermlogloggingcommand-linetext

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:splice-string AI (dependencies): splice-string is a small sindresorhus utility; consistent with this package's ecosystem. Low risk given publisher reputation. ai
provenance publisher-changed AI (provenance): dthree is a long-standing co-maintainer of wrap-ansi; this 2015 publish is a legitimate maintainer collaboration within the chalk org. ai
maintainer-change maintainer-added AI (maintainer-change): bcoe and dthree are well-known npm ecosystem contributors added as legitimate co-maintainers. ai
publish-pattern new-deps-added AI (publish-pattern): string-width is a core chalk-ecosystem package by sindresorhus; expected dependency for ANSI-aware word wrapping. ai
provenance no-provenance AI (provenance): Package is 3897 days old, predating Sigstore provenance on npm. Absence of provenance is expected and stable for all versions of this well-established package. ai

Versions (showing 21 of 21)

Version Deps Published
10.0.0 3 / 7
9.0.2 3 / 7
9.0.0 3 / 7
8.1.0 3 / 7
8.0.1 3 / 6
8.0.0 3 / 6
7.0.0 3 / 6
6.2.0 3 / 6
6.1.0 3 / 6
6.0.0 3 / 6
5.1.0 3 / 6
5.0.0 3 / 6
4.0.0 3 / 7
3.0.1 2 / 7
3.0.0 2 / 7
2.1.0 2 / 7
2.0.0 1 / 7
1.0.0 1 / 7
0.3.0 1 / 6
0.2.0 1 / 4
0.1.0 1 / 4