Repo brief: sindresorhus/slugify

Generated by RepoPilot · document generated 2026-09-17 · concise human review Evidence snapshot · analyzed 2026-09-17T03:57:39.086Z · commit 4355e631a698

Verdict

Mixed — Mixed signals — read the receipts

• Last commit 3d ago
• 20 active contributors
• MIT licensed
• CI configured

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

@sindresorhus/slugify is a JavaScript library that converts strings into URL-safe, filename-safe, and ID-safe slugs by handling transliteration (e.g., 'Déjà Vu!' → 'deja-vu'), camelcase decamelization, symbol replacement, and multi-language support including German umlauts, Cyrillic, Arabic, and Vietnamese. It solves the problem of creating human-readable, safe identifiers from arbitrary Unicode text with minimal configuration. Single-file library structure: index.js is the main export, index.d.ts provides TypeScript definitions, overridable-replacements.js contains default character replacement mappings. The package exports both ESM default and TypeScript types; no monorepo or complex…

Start here

Open these first:

• index.js — Entry point that exports the main slugify function and orchestrates string transformation.
• index.d.ts — TypeScript type definitions defining the public API surface for slugify and options.
• overridable-replacements.js — Character replacement mappings used by slugify to handle multilingual transliteration.
• package.json — Declares ES module format, Node 20+ requirement, and test/lint scripts.
• test.js — Test suite validating slugify behavior across languages and option combinations.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/sindresorhus/slugify.git
cd slugify
npm install
npm test

Daily commands:

This is a library, not a runnable application. For development: npm test runs xo (linter) and ava (test runner). No dev server; use npm link or install locally in another project to test integration.

Key cautions & unknowns

• Concentrated ownership — top contributor handles 70% of recent commits
• No tests detected in the complete Git tree
• Scorecard: default branch unprotected (0/10)
• No environment variables or external services required. Node version constraint (>=20) is strict; older projects cannot use this without upgrading. The library depends on @sindresorhus/transliterate for language…
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.