
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
create dom nodes from markdown inside tagged template strings using bel & marked
Create dom nodes from markdown inside tagged template strings using bel & marked.
npm install --save beldown
Because maybe you're working with yo-yo or choo and want a way to easily turn markdown into dom nodes they can use.
var md = require('beldown')
var html = md`
# hi
this is markdown
`
console.log(html.toString())
This returns:
<div>
<h1 id="hi">hi</h1>
<p>this is markdown</p>
</div>
var md = require('beldown')
md.setOptions({
gfm: false
})
var html = md`~~Github flavored markdown is off~~`
console.log(html.toString())
This returns:
<div>
<p>~~Github flavored markdown is off~~</p>
</div>
The wrapping div is required because multiple root elements must be wrapped in an enclosing tag. I'm not sure if there's a great way around that.
Leading whitespace of each line is currently stripped. Maybe there's a case where that breaks things?
FAQs
create dom nodes from markdown inside tagged template strings using bel & marked
We found that beldown demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.