Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Your version

215 stable releases, newest first, by release line. Notes are quoted as the maintainers published them.

  1. 13.x · latest line
  2. 13.15.35

    2 Apr 2026
    • isISO31661Alpha2/isISO31661Alpha3: add support for Kosovo (XK / XXK)

    • isHexColor: ignore non-object options @yuna0831

    • isTaxID: improve pt-BR locale by adding support for alphanumeric CNPJ format @easedu

  3. 13.15.26

    18 Dec 2025
  4. 13.15.23

    10 Nov 2025
    • Doc fixes and others:

  5. 13.15.22

    9 Nov 2025
    • isURL: fix regression with hostnames with ports @mbtools

    • isLength: improve handling Unicode variation selectors @koral--

    • Doc fixes and others:

  6. 13.15.20

    26 Oct 2025
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • isMobilePhone: add ar-QA locale @WardKhaddour

    • isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

  7. 13.15.15

    28 May 2025
  8. 13.15.0

    24 Mar 2025
  9. 13.12.0

    9 May 2024
  10. 13.11.0

    4 Aug 2023
  11. 13.9.0

    2 Feb 2023
  12. 13.7.0

    1 Nov 2021
    • security

      trim: remove regex to prevent ReDOS attack @tux-tn

    • isISO4217, currency code validator @jpaya17

    • isFQDN: add allow_wildcard option @fasenderos

  13. 13.5.2 – 13.6.02 releases without a noteShow each
  14. 13.5.1

    30 Nov 2020
    • New features: isVAT #1463

    • New features: isTaxID #1446

    • New features: isBase58 #1445

  15. 13.5.0

    30 Nov 2020
    • New features:

    • Fixes and Enhancements:

    • New and Improved locales: isAlpha, isAlphanumeric:

  16. 13.1.17

    18 Sep 2020
    • New features: None

    • Fixes and chores: fix validation for userinfo part for isURL @heanzyzabala

    • Fixes and chores: fix isBase32 and isBase64 to validate empty strings properly @AberDerBart

  17. 13.1.1

    11 Jun 2020
    • Hotfix for a regex incompatibility in some browsers (#1355

  18. 13.1.0

    10 Jun 2020
    • Added an isIMEI() validator

    • Added an isDate() validator

    • Added an isTaxID() validator

  19. 13.0.0

    20 Mar 2020
  20. 12.x
  21. 12.2.0

    25 Jan 2020
  22. 12.1.0

    21 Nov 2019
    • ES module for webpack tree shaking

    • Updated isIP() to accept scoped IPv6 addresses

    • New and improved locales (#1162, #1183, #1187, #1191)

  23. 12.0.0

    27 Oct 2019
    • Added isOctal() validator

    • Added isSlug() validator

    • Added isBIC() validator for bank identification codes

  24. 11.x
  25. 11.1.0

    4 Jul 2019
  26. 11.0.0

    23 May 2019
    • Added a isBase32() validator

    • Updated isEmail() to validate display names according to RFC2822

    • Updated isEmail() to check total email length

  27. 10.x
  28. 10.11.0

    15 Jan 2019
    • Fix imports like import .. from "validator/lib/.."

    • New locale

  29. 10.10.0

    23 Dec 2018
    • isISO8601() strict mode now works in the browser

    • New and improved locales (#931, #933, #947, #950)

  30. 10.9.0

    7 Nov 2018
    • Added an option to isURL() to reject email-like URLs

    • Added a strict option to isISO8601()

    • Relaxed isJWT() signature requirements

  31. 10.8.0

    24 Sep 2018
    • Added isIdentityCard()

    • Better error when validators are passed an invalid type

    • Locales are now exported (#890, #892)

  32. 10.7.1

    2 Sep 2018
    • Ignore case when checking URL protocol

    • Locale fix

  33. 10.7.0

    24 Aug 2018
  34. 10.6.0

    17 Aug 2018
    • Updated isMobilePhone() to match any locale's pattern by default

    • Added an option to ignore whitespace in isEmpty()

    • New and improved locales (#878, #879)

  35. 10.5.0

    3 Aug 2018
    • Disabled domain-specific email validation

    • Added support for IP hostnames in isEmail()

    • Added a no_symbols option to isNumeric()

  36. 10.4.0

    19 Jun 2018
    • Added an isIPRange() validator

    • Accept an array of locales in isMobilePhone()

    • New locale

  37. 10.3.0

    3 Jun 2018
    • Strict Gmail validation in isEmail()

    • New locales (#831, #835, #836)

  38. 10.2.0

    10 May 2018
    • Export the list of supported locales in isPostalCode()

  39. 10.1.0

    4 May 2018
    • Added an isISO31661Alpha3() validator

  40. 10.0.0

    3 May 2018
    • Allow floating points in isNumeric()

    • Disallow GMail addresses with multiple consecutive dots, or leading/trailing dots

    • Added an isRFC3339() validator

  41. 9.x
  42. 9.4.1

    18 Feb 2018
    • security

      Patched a REDOS vulnerability in isDataURI

    • New and improved locales

  43. 9.4.0

    30 Jan 2018
    • Added an option to isMobilePhone to require a country code

    • New and improved locales

  44. 9.3.0

    26 Jan 2018
  45. 9.2.0

    9 Dec 2017
    • Added an isMimeType() validator

    • New and improved locales (#753, #755, #764)

  46. 9.1.2

    24 Nov 2017
    • Fixed a bug with the isFloat validator

  47. 9.1.1

    25 Oct 2017
  48. 9.1.0

    24 Oct 2017
    • Added an isISO31661Alpha2() validator

    • New locales (#735, #737)

  49. 9.0.0

    29 Sep 2017
    • normalizeEmail() no longer validates the email address

    • Added locale-aware validation to isFloat() and isDecimal()

    • Added an isPort() validator

  50. 8.x
  51. 8.2.0

    9 Sep 2017
    • Added an isHash() validator

    • Control decimal places in isCurrency()

    • New and improved locales (#700, #701, #714, #715, #718)

  52. 8.1.0

    22 Aug 2017
    • Fix require('validator/lib/isIS8601') calls

    • Added an isLatLong() and isPostalCode() validator

    • Allow comma in email display names

  53. 8.0.0

    7 Jul 2017
    • isURL() now requires the require_tld: false option to validate localhost

    • isURL() now rejects URLs that are protocol only

    • Fixed a bug where isMobilePhone() would silently return false if the locale was invalid or unsupported

  54. 7.x
  55. 7.2.0

    29 Jun 2017
    • Added an option to validate any phone locale

    • Fixed a bug in credit card validation

    • Disallow whitespace, including unicode whitespace, in TLDs

  56. 7.1.0

    22 Jun 2017
    • Added an isISRC() validator for ISRC

    • Fixed a bug in credit card validation

    • Reduced the maximum allowed address in isEmail() based on RFC3696 errata