
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@acdvorak/myst-to-docx
Advanced tools
Export from a MyST Markdown document to Microsoft Word (*.docx)
myst-to-docxExport a MyST document to a Microsoft Word file, using docx.
myst-to-docx has a DocxSerializer object that you write to as you walk the MyST document. It is a light wrapper around https://docx.js.org/, which actually does the export. myst-to-docx is write only (i.e. can export to, but can’t read from *.docx), and has all standard MyST nodes covered (see below).
myst-to-docx can be used in the browser or in node. This library currently only has dependence on docx, myst-frontmatter and buffer-image-size - and the serialization handlers can be edited externally (see Extended Usage below).
The AST should be transformed through myst-transforms to ensure that all nodes are enumerated.
The utility fetchImagesAsBuffers walks the AST and downloads images into buffers to be used by docx, it also figures out the size and returns an object with getImageBuffer and getImageDimensions, which need to be passed to the options. If your images are more complex (e.g. they are mermaid diagrams, or Jupyter Outputs), you will need to do more complex preprocessing to create these two functions.
A Blob is returned, which can be downloaded client side.
import { unified } from 'unified';
import { mystToDocx, fetchImagesAsBuffers, DocxResult } from 'myst-to-docx';
const opts = await fetchImagesAsBuffers(tree);
const file = unified().use(mystToDocx, opts).stringify(tree);
const blob = await (file.result as DocxResult);
In node, the image dimensions are discovered using a node-only package, and don't need to be provided. The result of the conversion in node is a Buffer as the file.result, which can be saved to disk.
import { unified } from 'unified';
import { mystToDocx, DocxResult } from 'myst-to-docx';
const file = unified()
.use(mystToDocx, {
getImageBuffer(url) {
return fs.readFileSync(url).buffer;
};
})
.stringify(tree);
const buffer = await (file.result as DocxResult);
Instead of using the defaultDocxSerializer you can override or provide cusome serializers.
import { DocxSerializer, defaultNodes, defaultMarks } from 'myst-to-docx';
const nodeSerializer = {
...defaultNodes,
my_paragraph(state, node) {
state.renderInline(node);
state.closeBlock(node);
},
};
export const myDocxSerializer = new DocxSerializer(nodeSerializer, defaultMarks);
The state is the DocxSerializerState and has helper methods to interact with docx.
FAQs
Export from a MyST Markdown document to Microsoft Word (*.docx)
The npm package @acdvorak/myst-to-docx receives a total of 34 weekly downloads. As such, @acdvorak/myst-to-docx popularity was classified as not popular.
We found that @acdvorak/myst-to-docx demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.