Product
Socket Now Supports uv.lock Files
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
@blocz/mdx-live
Advanced tools
@blocz/mdx-live
@blocz/mdx-live
allows you to dynamically render a MDX string.
It understands the import statements, and you can provide how they will get resolved.
Exports statements are also executed. WARNING: this allows XSS so be sure to be in a safe environment.
You can also provide a scope for all the variables and components used in the MDX.
Since the v0.2.0, it's based on MDX v2. It you want to use it with MDX v1, you can look at the v0.1.0.
⚠️ This package is only published as an ESM package, it doesn't provide any CJS exports. The reason behind this is because MDX switch to ESM only in their v2 too (see https://mdxjs.com/migrating/v2/#esm).\ And as you'll also need regular MDX packages to make this one work, we also switched to ESM.
import { MDX } from "@blocz/mdx-live";
const simpleMDX = `
### How it works
1. First item
2. Second item
---
### TL;DR
- First item
- Second item
- Nested list
- First nested \`item\`
- Second _nested_ item
- **Third** nested item
`;
const App = () => {
return <MDX code={simpleMDX} />;
};
import { MDX } from "@blocz/mdx-live";
const Button = ({ label, variant, onClick }) => (
<button data-variant={variant} onClick={onClick}>
{label}
</button>
);
const scopedMDX = `
<Button
variant="blue"
label="Click Me!"
onClick={() => alert('Hello there!')}
/>
`;
const App = () => {
return <MDX code={scopedMDX} defaultScope={{ Button }} />;
};
import { MDX } from "@blocz/mdx-live";
const Button = ({ label, variant, onClick }) => (
<button data-variant={variant} onClick={onClick}>
{label}
</button>
);
const exportMDX = `
export const label = "Click Me!";
<Button variant="blue" label={label} />
`;
const App = () => {
return <MDX code={exportMDX} defaultScope={{ Button }} />;
};
import { MDX } from "@blocz/mdx-live";
const Button = ({ label, variant, onClick }) => (
<button data-variant={variant} onClick={onClick}>
{label}
</button>
);
const importMDX = `
import { Button } from 'example';
<Button variant="blue" label="Click Me!" />
`;
const resolveImport = async (option) => {
if (
option.kind === "named" &&
option.path === "example" &&
option.variable === "Button"
) {
return Button;
}
return undefined;
};
const App = () => {
return <MDX code={importMDX} resolveImport={resolveImport} />;
};
export type ResolveImport = (
option:
| { kind: "named"; path: string; variable: string }
| { kind: "namespace" | "default"; path: string },
) => Promise<any>;
You can use the props recmaPlugins
, rehypePlugins
, and remarkPlugins
to pass remark (plugins based on the markdown AST), rehype (plugins based on the html AST), and recma (plugins based on the JS AST) plugins to the MDX compiler.
See https://mdxjs.com/packages/mdx/#optionsremarkplugins for more information.
FAQs
Unknown package
The npm package @blocz/mdx-live receives a total of 9 weekly downloads. As such, @blocz/mdx-live popularity was classified as not popular.
We found that @blocz/mdx-live demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.