fix: strip HTML tags from plaintext search result descriptions

[serhalp]

🔗 Linked issue

Fixes#1681

🧭 Context

Probably a regression from #1582

📚 Description

After decoding HTML entities, descriptions containing entity-encoded HTML (e.g. <a>) were displaying reconstructed tags as raw text. Apply stripHtmlTags after decodeHtmlEntities in PackageSelector and TableRow components.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
npmx.dev	Ready	Preview, Comment	Feb 27, 2026 2:31pm

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
docs.npmx.dev	Ignored	Preview	Feb 27, 2026 2:31pm
npmx-lunaria	Ignored		Feb 27, 2026 2:31pm

[codecov]

Codecov Report

❌ Patch coverage is 88.88889% with 1 line in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
app/components/Compare/PackageSelector.vue	0.00%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between a76bd69 and 6dbc417.

📒 Files selected for processing (2)

• server/utils/readme.ts
• shared/utils/html.ts

---

📝 Walkthrough

Walkthrough

This change adds an exported stripHtmlTags(text: string): string to shared/utils/html.ts, updates components (app/components/Compare/PackageSelector.vue and app/components/Package/TableRow.vue) to render descriptions by first decoding HTML entities then stripping HTML tags, replaces a local stripHtmlTags in server/utils/readme.ts with the shared implementation, and adds unit tests covering stripHtmlTags and combined decoding+stripping behaviour.

Possibly related PRs

• perf: move html entity decoding to server side #1561: Modifies shared/utils/html.ts utilities—the same module extended here with stripHtmlTags.
• fix(ui): escape special characters in description #1582: Updated package description rendering to use decodeHtmlEntities in the same components now updated to also strip HTML tags.

Suggested reviewers

• 43081j

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description check	✅ Passed	The PR description clearly explains the bug fix: preventing raw HTML rendering in search results by stripping HTML tags after decoding entities.
Linked Issues check	✅ Passed	The PR directly addresses issue #1681 by implementing the stripHtmlTags function and applying it in PackageSelector and TableRow components to prevent raw HTML rendering.
Out of Scope Changes check	✅ Passed	All changes are focused on the core objective: refactoring shared HTML utility functions and applying stripHtmlTags to search result descriptions. No unrelated modifications detected.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

• 📝 Generate docstrings (stacked PR)
• 📝 Generate docstrings (commit on current branch)

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch serhalp/fix-search-dropdown

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

test/unit/shared/utils/html.spec.ts (1)

47-50: Add a regression test for decoded comparison text (non-tags).

Please include a case where < / > represent plain text operators, so we guard against accidental content removal.

Suggested test addition

 describe('stripHtmlTags', () => {
+ it('preserves decoded angle-bracket text when it is not an HTML tag', () => {+ const raw = '1 &lt; 2 &amp;&amp; 3 &gt; 1'+ expect(stripHtmlTags(decodeHtmlEntities(raw))).toBe('1 < 2 && 3 > 1')+ })+
it('works with decodeHtmlEntities to clean descriptions', () => {
const raw = '&lt;a href=&quot;url&quot;&gt;link&lt;/a&gt; and text'
expect(stripHtmlTags(decodeHtmlEntities(raw))).toBe('link and text')
})
})

---

ℹ️ Review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 71eba9d and a76bd69.

📒 Files selected for processing (4)

• app/components/Compare/PackageSelector.vue
• app/components/Package/TableRow.vue
• shared/utils/html.ts
• test/unit/shared/utils/html.spec.ts

[vmrjnvc]

now with this changes there could be full empty descriptions displayed, but there should be dash if there is no description

so correct should be {{ stripHtmlTags(decodeHtmlEntities(pkg.description || '')) || '-'}} because if there is just html in the description, all will be removed and we don't have fallback

[serhalp]

good catch! would you like to open a quick PR for that? 🙏🏼

[vmrjnvc]

sure, no problem!

here #1763