
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@marktext/muya
Advanced tools

Muya originated from MarkText, which was originally used in the MarkText and provides Markdown editing support for MarkText. Today, Muya is available as a stand-alone library that provides an efficient Markdown editing experience for many web browser applications.
:a: Muya is still under development and should not be used for production.
yarn add @marktext/muya
import Muya from '@marktext/muya'
const container = document.querySelector('#editor')
const muya = new Muya(container)
Coming soon!!!
# step1: install dependencies
yarn
# step2: run the development codes
yarn dev
yarn build
# update version numbers
npm run pub
❓ What is the relationship between MarkText and Muya?
Muya is derived from MarkText. Our team believes that Muya should not be limited to desktop applications. It should also run in a web browser, so we have done some compatibility with browsers and Electron applications, so that Muya can leave Electron Apps and can run into different browser environments.
❓What is the relationship between MarkText's version and the Muya's version?
None!
MarkText - Next generation markdown editor, running on platforms of MacOS Windows and Linux.
MindBox - A note-taking app that perfectly supports markdown syntax.
MIT © Jocs
FAQs
Future markdown editor
We found that @marktext/muya demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.