
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@stll/docx-core
Advanced tools
Typed OOXML/DOCX model, validation, serialization, legal-source compilation, and browser-native package projection.
A typed OOXML/DOCX document model with parsing, validation, and serialization.
The package exposes a structured document model (paragraphs, runs, tables,
styles, section properties) together with the tools to produce and check DOCX
packages, plus a legal-source compiler that turns a legal draft (GFM markdown
plus @ directives) into that model or a finished DOCX file, and a plain
markdown reader (compileMarkdownToContent) that shares its parser.
import { compileLegalSourceToDocx, validateDocxPackage } from "@stll/docx-core";
const { docx } = await compileLegalSourceToDocx(source);
const result = await validateDocxPackage(docx);
The document model types are also available from a dedicated subpath:
import type { Document, Paragraph, Run } from "@stll/docx-core/model";
bun add @stll/docx-core
. — the document model types, the legal-source compiler
(parseLegalSource, compileLegalSourceToDocument,
compileLegalSourceToDocx, validateLegalDraft), the markdown reader
(compileMarkdownToContent, sanitizeExternalUrl), DOCX serialization
(serializeDocumentToDocx), and validation (validateDocxPackage,
validateDocumentModel, assertValidDocumentModel)../model — the document model types only.Apache-2.0
FAQs
Typed OOXML/DOCX model, validation, serialization, legal-source compilation, and browser-native package projection.
The npm package @stll/docx-core receives a total of 3,392 weekly downloads. As such, @stll/docx-core popularity was classified as popular.
We found that @stll/docx-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.