entities 6.0.1: escapeAttribute

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify entities.escapeAttribute in pkg:npm/entities@6.0.1
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:npm/entities@6.0.1
Demonstrate these symbols/APIs:
  - entities.escapeAttribute

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:6195cadfae51d69e1150df8ebac1452f6a31e2d301f63dd16f4d164ad4150fea","contract":["escapeAttribute encodes double quotes into \u0026quot;","escapeAttribute encodes ampersands into \u0026amp;","escapeAttribute encodes non-breaking spaces into \u0026nbsp;","escapeAttribute preserves single quotes, angle brackets, and alphanumeric characters","escapeAttribute preserves empty strings and strings without attribute-sensitive characters"],"goal":"verify entities.escapeAttribute in pkg:npm/entities@6.0.1","kind":"HOW","packages":["pkg:npm/entities@6.0.1"],"schemaVersion":1,"symbols":["entities.escapeAttribute"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","executionContext":"node","language":"javascript","libc":"glibc","libcVersion":"2.39","moduleSystem":"esm","os":"linux","osVersionBucket":"24","packageManager":"npm","packageManagerVersion":"10.9.8","runtime":"node","runtimeVersion":"22.23.2","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/entities@6.0.1"],"schemaVersion":1,"subject":"pkg:npm/entities@6.0.1","symbols":["entities.escapeAttribute"],"verifierAdapter":"node-typescript@1"}

{
  "name": "sample-entities-escapeattribute",
  "version": "1.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sample-entities-escapeattribute",
      "version": "1.0.0",
      "dependencies": {
        "entities": "6.0.1"
      }
    },
    "node_modules/entities": {
      "version": "6.0.1",
      "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
      "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
      "license": "BSD-2-Clause",
      "engines": {
        "node": ">=0.12"
      },
      "funding": {
        "url": "https://github.com/fb55/entities?sponsor=1"
      }
    }
  }
}

{
  "name": "sample-entities-escapeattribute",
  "version": "1.0.0",
  "type": "module",
  "private": true,
  "dependencies": {
    "entities": "6.0.1"
  }
}

{
  "schemaVersion": 1,
  "goal": "verify entities.escapeAttribute in pkg:npm/entities@6.0.1",
  "kind": "HOW",
  "packages": [
    "pkg:npm/entities@6.0.1"
  ],
  "symbols": [
    "entities.escapeAttribute"
  ]
}

import assert from 'node:assert/strict';
import * as entities from 'entities';
import { escapeAttribute } from 'entities';

// 1. escapeAttribute encodes double quotes into "
assert.equal(
  escapeAttribute('"value"'),
  '"value"'
);
assert.equal(
  entities.escapeAttribute('key="value" and "another"'),
  'key="value" and "another"'
);

// 2. escapeAttribute encodes ampersands into &
assert.equal(
  escapeAttribute('foo & bar & baz'),
  'foo & bar & baz'
);

// 3. escapeAttribute encodes non-breaking spaces into  
assert.equal(
  escapeAttribute('no\u00A0break\u00A0space'),
  'no break space'
);

// 4. escapeAttribute preserves single quotes, angle brackets, and alphanumeric characters
assert.equal(
  escapeAttribute("<span class='test'>123</span>"),
  "<span class='test'>123</span>"
);

// 5. escapeAttribute preserves empty strings and strings without attribute-sensitive characters
assert.equal(
  escapeAttribute(''),
  ''
);
assert.equal(
  escapeAttribute('plain text 123 !?'),
  'plain text 123 !?'
);

console.log('Contract tests passed successfully.');