Ether Library: The Language Index (2028?)

[FadiShawki]

No description provided.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	ray	7278373	Commit Preview URL Branch Preview URL	Feb 27 2026, 01:03 PM

In general, the safest fix is to avoid manual, partial escaping and rely on well-tested URL/URI encoding functions. For npm package names, encodeURIComponent correctly encodes both scoped (@scope/name) and unscoped names into the form the registry expects (e.g. @scope%2Fname). This removes the need for custom replace logic and guarantees all occurrences of reserved characters (including all /) are encoded consistently.

The best way to fix the problem without changing existing functionality is to stop special-casing names that start with @ and instead always apply encodeURIComponent to fullName in both locations where encodedName is computed. That is:

• In fetchPackage, replace the conditional fullName.startsWith('@') ? fullName.replace('/', '%2F') : encodeURIComponent(fullName) with just encodeURIComponent(fullName).
• In downloadVersion, do the same for the analogous encodedName computation.

These changes are all within @ether/library/mirror/src/adapters/npm.ts, lines 149–153 and 175–180 (as shown). No new imports or helper methods are needed, since encodeURIComponent is a built-in global in JavaScript/TypeScript. Existing functionality should remain the same for valid npm names, but the encoding will now also be correct and complete for any unexpected extra slashes or special characters.

In general, to fix this kind of issue you should avoid using String.prototype.replace with a plain string when escaping meta-characters, because it only affects the first occurrence. Instead, use a regular expression with the g flag (for all occurrences), or a more robust encoding function that handles all relevant characters.

For this file, the best minimal fix is to replace the replace('/', '%2F') calls with a global replacement using a regular expression: .replace(/\//g, '%2F'). This ensures that every / is encoded, while preserving existing behavior for normal scoped package names that only contain a single /. We do not need new imports or extra helper methods; the change is purely local.

Concretely:

• In downloadVersion, on line 179, change:
  • fullName.replace('/', '%2F') → fullName.replace(/\//g, '%2F').
• In fetchDoc, on line 207, change:
  • name.replace('/', '%2F') → name.replace(/\//g, '%2F').

No other parts of the file need to change.

In general, the problem should be fixed by ensuring that all occurrences of / in scoped package names are encoded, not just the first one. This is best done by either using a global regular expression with the g flag (name.replace(/\//g, '%2F')) or, more idiomatically in this context, by using encodeURIComponent on the entire name and then selectively undoing encoding for characters that must remain literal (like @) so that the resulting URL matches npm’s expectations.

The safest change that preserves current behavior is:

• For names starting with @, encode the entire name using encodeURIComponent.
• Then replace the encoded @ (%40) back to @, so scoped URLs keep the @ prefix but all / and other special characters are correctly encoded.
  This keeps the existing unscoped behavior (already using encodeURIComponent) and removes the incomplete escaping for scoped names.

Concretely:

• In fetchPackage, at lines 150–153, replace the ternary branch that uses fullName.replace('/', '%2F') with logic that:
  • If fullName starts with @, compute encodedName = encodeURIComponent(fullName).replace('%40', '@');
  • Else encodedName = encodeURIComponent(fullName);
• In fetchDoc, at lines 205–208, similarly replace name.replace('/', '%2F') with the same encodeURIComponent(...).replace('%40', '@') pattern.

No new methods or imports are required; we only use the built-in encodeURIComponent and String.prototype.replace.