Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Gitdown adds additional functionality (generating table of contents, including documents, using variables, etc.) to GitHub Flavored Markdown.
// Generate table of contents
{"gitdown": "contents"}
{"gitdown": "contents", "maxLevel": 4}
{"gitdown": "contents", "rootId": "features"}
// Use a custom defined variable
{"gitdown": "variable", "name": "nameOfTheVariable"}
// Include file
{"gitdown": "include", "file": "./LICENSE.md"}
// Get file size
{"gitdown": "filesize", "file": "./src/gitdown.js"}
{"gitdown": "filesize", "file": "./src/gitdown.js", "gzip": true}
// Generate badges
{"gitdown": "badge", "name": "npm-version"}
{"gitdown": "badge", "name": "bower-version"}
{"gitdown": "badge", "name": "travis"}
{"gitdown": "badge", "name": "david"}
{"gitdown": "badge", "name": "david-dev"}
{"gitdown": "badge", "name": "waffle"}
// Print date
{"gitdown": "date", "format": "YYYY"}
npm install gitdown -g
gitdown ./.README/README.md --output-file ./README.md
import Gitdown from 'gitdown';
// Read the markdown file written using the Gitdown extended markdown.
// File name is not important.
// Having all of the Gitdown markdown files under ./.README/ path is the recommended convention.
const gitdown = await Gitdown.readFile('./.README/README.md');
// If you have the subject in a string, call the constructor itself:
// gitdown = await Gitdown.read('literal string');
// Get config.
gitdown.getConfig()
// Set config.
gitdown.setConfig({
gitinfo: {
gitPath: __dirname
}
})
// Output the markdown file.
// All of the file system operations are relative to the root of the repository.
gitdown.writeFile('README.md');
Gitdown is using console
object to log messages. You can set your own logger:
gitdown.setLogger({
info: () => {},
warn: () => {}
});
The logger is used to inform about Dead URLs and Fragment Identifiers.
Gitdown extends markdown syntax using JSON:
{"gitdown": "helper name", "parameter name": "parameter value"}
The JSON object must have a gitdown
property that identifies the helper you intend to execute. The rest is a regular JSON string, where each property is a named configuration property of the helper that you are referring to.
JSON that does not start with a "gitdown" property will remain untouched.
Use HTML comment tags to ignore sections of the document:
Gitdown JSON will be interpolated.
<!-- gitdown: off -->
Gitdown JSON will not be interpolated.
<!-- gitdown: on -->
Gitdown JSON will be interpolated.
gitdown.registerHelper('my-helper-name', {
/**
* @var {Number} Weight determines the processing order of the helper function. Default: 10.
*/
weight: 10,
/**
* @param {Object} config JSON configuration.
* @return {mixed|Promise}
*/
compile: (config) => {
return 'foo: ' + config.foo;
}
});
{"gitdown": "my-helper-name", "foo": "bar"}
Produces:
foo: bar
a
{"gitdown": "contents"}
Generates table of contents.
The table of contents is generated using markdown-contents.
{"gitdown": "contents", "maxLevel": 4, "rootId": "features"}
* [Generate Table of Contents](#user-content-features-generate-table-of-contents)
* [Example](#user-content-features-generate-table-of-contents-example)
* [JSON Configuration](#user-content-features-generate-table-of-contents-json-configuration)
* [Heading Nesting](#user-content-features-heading-nesting)
* [Parser Configuration](#user-content-features-heading-nesting-parser-configuration)
* [Find Dead URLs and Fragment Identifiers](#user-content-features-find-dead-urls-and-fragment-identifiers)
* [Parser Configuration](#user-content-features-find-dead-urls-and-fragment-identifiers-parser-configuration-1)
* [Reference an Anchor in the Repository](#user-content-features-reference-an-anchor-in-the-repository)
* [JSON Configuration](#user-content-features-reference-an-anchor-in-the-repository-json-configuration-1)
* [Parser Configuration](#user-content-features-reference-an-anchor-in-the-repository-parser-configuration-2)
* [Variables](#user-content-features-variables)
* [Example](#user-content-features-variables-example-1)
* [JSON Configuration](#user-content-features-variables-json-configuration-2)
* [Parser Configuration](#user-content-features-variables-parser-configuration-3)
* [Include File](#user-content-features-include-file)
* [Example](#user-content-features-include-file-example-2)
* [JSON Configuration](#user-content-features-include-file-json-configuration-3)
* [Get File Size](#user-content-features-get-file-size)
* [Example](#user-content-features-get-file-size-example-3)
* [JSON Configuration](#user-content-features-get-file-size-json-configuration-4)
* [Generate Badges](#user-content-features-generate-badges)
* [Supported Services](#user-content-features-generate-badges-supported-services)
* [Example](#user-content-features-generate-badges-example-4)
* [JSON Configuration](#user-content-features-generate-badges-json-configuration-5)
* [Print Date](#user-content-features-print-date)
* [Example](#user-content-features-print-date-example-5)
* [JSON Configuration](#user-content-features-print-date-json-configuration-6)
* [Gitinfo](#user-content-features-gitinfo)
* [Example](#user-content-features-gitinfo-example-6)
* [Supported Properties](#user-content-features-gitinfo-supported-properties)
* [JSON Configuration](#user-content-features-gitinfo-json-configuration-7)
* [Parser Configuration](#user-content-features-gitinfo-parser-configuration-4)
Name | Description | Default |
---|---|---|
maxLevel | The maximum heading level after which headings are excluded. | 3 |
rootId | ID of the root heading. Provide it when you need table of contents for a specific section of the document. Throws an error if element with the said ID does not exist in the document. | N/A |
Github markdown processor generates heading ID based on the text of the heading.
The conflicting IDs are solved with a numerical suffix, e.g.
# Foo
## Something
# Bar
## Something
<h1 id="foo">Foo</h1>
<h2 id="something">Something</h1>
<h1 id="bar">Bar</h1>
<h2 id="something-1">Something</h1>
The problem with this approach is that it makes the order of the content important.
Gitdown will nest the headings using parent heading names to ensure uniqueness, e.g.
# Foo
## Something
# Bar
## Something
<h1 id="foo">Foo</h1>
<h2 id="foo-something">Something</h1>
<h1 id="bar">Bar</h1>
<h2 id="bar-something">Something</h1>
Name | Description | Default |
---|---|---|
headingNesting.enabled | Boolean flag indicating whether to nest headings. | true |
Uses Deadlink to iterate through all of the URLs in the resulting document. Throws an error if either of the URLs is resolved with an HTTP status other than 200 or fragment identifier (anchor) is not found.
Name | Description | Default |
---|---|---|
deadlink.findDeadURLs | Find dead URLs. | false |
deadlink.findDeadFragmentIdentifiers | Find dead fragment identifiers. | false |
This feature is under development. Please suggest ideas https://github.com/gajus/gitdown/issues
{"gitdown": "anchor"}
Generates a Github URL to the line in the source code with the anchor documentation tag of the same name.
Place a documentation tag @gitdownanchor <name>
anywhere in the code base, e.g.
/**
* @gitdownanchor my-anchor-name
*/
Then reference the tag in the Gitdown document:
Refer to [foo]({"gitdown": "anchor", "name": "my-anchor-name"}).
The anchor name must match /^[a-z]+[a-z0-9\-_:\.]*$/i
.
Gitdown will throw an error if the anchor is not found.
Name | Description | Default |
---|---|---|
name | Anchor name. | N/A |
Name | Description | Default |
---|---|---|
anchor.exclude | Array of paths to exclude. | ['./dist/*'] |
{"gitdown": "variable"}
Prints the value of a property defined under a parser variable.scope
configuration property. Throws an error if property is not set.
const gitdown = Gitdown(
'{"gitdown": "variable", "name": "name.first"}' +
'{"gitdown": "variable", "name": "name.last"}'
);
gitdown.setConfig({
variable: {
scope: {
name: {
first: "Gajus",
last: "Kuizinas"
}
}
}
});
Name | Description | Default |
---|---|---|
name | Name of the property defined under a parser variable.scope configuration property. | N/A |
Name | Description | Default |
---|---|---|
variable.scope | Variable scope object. | {} |
{"gitdown": "include"}
Includes the contents of the file to the document.
The included file can have Gitdown JSON hooks.
See source code of ./.README/README.md.
Name | Description | Default |
---|---|---|
file | Path to the file. The path is relative to the root of the repository. | N/A |
{"gitdown": "filesize"}
Returns file size formatted in human friendly format.
{"gitdown": "filesize", "file": "src/gitdown.js"}
{"gitdown": "filesize", "file": "src/gitdown.js", "gzip": true}
Generates:
9.3 kB
2.8 kB
Name | Description | Default |
---|---|---|
file | Path to the file. The path is relative to the root of the repository. | N/A |
gzip | A boolean value indicating whether to gzip the file first. | false |
{"gitdown": "badge"}
Gitdown generates markdown for badges using the environment variables, e.g. if it is an NPM badge, Gitdown will lookup the package name from package.json
.
Badges are generated using http://shields.io/.
Name | Description |
---|---|
npm-version | NPM package version. |
bower-version | Bower package version. |
travis | State of the Travis build. |
david | David state of the dependencies. |
david-dev | David state of the development dependencies. |
waffle | Issues ready on Waffle board. |
gitter | Join Gitter chat. |
coveralls | Coveralls. |
codeclimate-gpa | Code Climate GPA. |
codeclimate-coverage | Code Climate test coverage. |
appveyor | AppVeyor status. |
What service are you missing? Raise an issue.
{"gitdown": "badge", "name": "npm-version"}
{"gitdown": "badge", "name": "travis"}
{"gitdown": "badge", "name": "david"}
Generates:
[![NPM version](http://img.shields.io/npm/v/gitdown.svg?style=flat-square)](https://www.npmjs.org/package/gitdown)
[![Travis build status](http://img.shields.io/travis/brettz9/gitdown/update-readme.svg?style=flat-square)](https://travis-ci.org/brettz9/gitdown)
[![Dependency Status](https://img.shields.io/david/brettz9/gitdown.svg?style=flat-square)](https://david-dm.org/brettz9/gitdown)
Name | Description | Default |
---|---|---|
name | Name of the service. | N/A |
{"gitdown": "date"}
Prints a string formatted according to the given moment format string using the current time.
{"gitdown": "date"}
{"gitdown": "date", "format": "YYYY"}
Generates:
1563038327
2019
Name | Description | Default |
---|---|---|
format | Moment format. | X (UNIX timestamp) |
{"gitdown": "gitinfo"}
Gitinfo gets info about the local GitHub repository.
{"gitdown": "gitinfo", "name": "username"}
{"gitdown": "gitinfo", "name": "name"}
{"gitdown": "gitinfo", "name": "url"}
{"gitdown": "gitinfo", "name": "branch"}
brettz9
gitdown
https://github.com/brettz9/gitdown
update-readme
Name | Description |
---|---|
username | Username of the repository author. |
name | Repository name. |
url | Repository URL. |
branch | Current branch name. |
Name | Description | Default |
---|---|---|
name | Name of the property. | N/A |
Name | Description | Default |
---|---|---|
gitinfo.defaultBranchName | Default branch to use when the current branch name cannot be resolved. | N/A |
gitinfo.gitPath | Path to the .git/ directory or a descendant. | __dirname of the script constructing an instance of Gitdown . |
Use Husky to check if user generated README.md before committing his changes.
"husky": {
"hooks": {
"pre-commit": "npm run lint && npm run test && npm run build",
"pre-push": "gitdown ./.README/README.md --output-file ./README.md --check",
}
}
--check
attributes makes Gitdown check if the target file differes from the source template. If the file differs then the program exits with an error code and message:
Gitdown destination file does not represent the current state of the template.
Do not automate generating and committing documentation: automating commits will result in a noisy commit log.
FAQs
Github markdown preprocessor.
The npm package gitdown receives a total of 3,025 weekly downloads. As such, gitdown popularity was classified as popular.
We found that gitdown demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.