GitHub

escape-string-regexp

Escape RegExp special characters

npm says

486,828,029

per week

Every tarball fetch: mirrors, scanners, CI and people.

real installs

high confidence

≈ 487M

per week

Mirror spikes and crawlers removed. CI and dependency installs still count, so this is not a head count.

noise under 1% of npm's count, so nearly all of it counts. noise real installs

Why this estimate

With JavaScript on, this lists what the filter found for this package.

Most used major version: 4, not the latest one, with 43% of last week's downloads above the crawler floor. Most used single version: 4.0.0.

Snapshot from the daily build of Nov 9, 2026, last 7 days of npm data. With JavaScript on, this page recomputes it live from the npm API.

How many people use escape-string-regexp?

npm counted 486,828,029 downloads of escape-string-regexp in the last 7 days. Nobody can count people exactly, npm included: it does not record who downloaded what. After removing mirror spikes and crawlers, about 487M look like real installs. At this scale most of them come from CI, builds and other packages that depend on escape-string-regexp, so the number of people behind them is far smaller.

Is escape-string-regexp still maintained?

Probably not actively: there has been no release in over a year, though that can also mean it is simply finished. The latest version, 5.0.0, came out on Apr 17, 2021. There were no stable releases in the last 12 months. It was first published on Jun 24, 2014. npm lists 1 maintainer.

Is escape-string-regexp still used?

Downloads with publish spikes removed are up 36% over 3 months and up 140% over 11 months. For scale, the median of the 384 packages we track, which lean towards today's most downloaded, is up 164% over 11 months, so this one is behind that. Last week, 43% of downloads above the crawler floor were on major version 4, not the latest one; the most used single version was 4.0.0, with 43%. Weekdays get 1.6× the downloads of weekends, which fits people at work, though CI follows the same rhythm. Crawlers account for about 17,003 downloads a week, roughly 1,700 per version.

Monthly downloads of escape-string-regexp

The busiest month was Oct 2026, with about 62,507,383 downloads a day once publish spikes are removed; the quietest was Dec 2025 (the holiday season), with about 23,901,411.

monthnpm downloadspublish spikes removedreal installsvs month before
Oct 2026 1,562,684,579 0 1.56B up 8%
Sep 2026 1,558,467,824 0 1.56B up 17%
Aug 2026 1,525,218,167 0 1.53B about flat
Jul 2026 1,458,495,463 0 1.46B up 6%
Jun 2026 1,336,647,118 0 1.34B up 11%
May 2026 1,239,068,719 0 1.24B about flat
Apr 2026 1,142,869,770 0 1.14B up 8%
Mar 2026 1,092,507,116 0 1.09B up 15%
Feb 2026 855,347,878 0 855M up 18%
Jan 2026 802,449,532 0 802M up 8%
Dec 2025 740,943,728 0 741M —

Whole months through Oct 31, 2026. Publish spikes are found day by day and summed per month. Real installs apply this week's crawler share to each month's downloads (the upper end also keeps the removed spikes), so they follow npm's curve rather than measure it. The change compares spike-free downloads per day.

How the estimate works

  1. Cut the spike every new version gets from mirrors in its first days.
  2. Subtract the flat floor robots download from every version each week.
  3. Show what is left as a range, with a confidence level. It still includes CI and dependency installs, so it is not a count of people.

Read the methodology

Other packages