gitter-markdown-processor - npm Package Compare versions

Comparing version 7.1.3 to 7.2.0

lib/process-chat-async.js

@@ -16,3 +16,2 @@ /*jshint globalstrict:true, trailing:false, unused:true, node:true */
       if(!plainText) return result;
-
       return detectLang(plainText)
@@ -19,0 +18,0 @@ .then(function(lang) {

lib/process-chat.js

@@ -10,2 +10,3 @@ /*jshint globalstrict:true, trailing:false, unused:true, node:true */
 var matcher   = require('./github-url-matcher');
+var htmlencode = require('htmlencode');
 
@@ -24,3 +25,81 @@ var options = { gfm: true, tables: true, sanitize: true, breaks: true, linkify: true, skipComments: true };
 
-highlight.configure({classPrefix: ''});
+highlight.configure( { classPrefix: '', languages : [
+  "apache",
+  "applescript",
+  "css",
+  "bash",
+  "clojure-repl",
+  "clojure",
+  "javascript",
+  "coffeescript",
+  "cpp",
+  "cs",
+  "d",
+  "dart",
+  "delphi",
+  "diff",
+  "django",
+  "dockerfile",
+  "dos",
+  "elixir",
+  "erb",
+  "erlang-repl",
+  "erlang",
+  "fortran",
+  "fsharp",
+  "gcode",
+  "gherkin",
+  "go",
+  "gradle",
+  "groovy",
+  "haml",
+  "handlebars",
+  "haskell",
+  "http",
+  "ini",
+  "java",
+  "json",
+  "kotlin",
+  "less",
+  "lisp",
+  "livescript",
+  "lua",
+  "makefile",
+  "markdown",
+  "mathematica",
+  "matlab",
+  "nginx",
+  "objectivec",
+  "perl",
+  "php",
+  "powershell",
+  "prolog",
+  "puppet",
+  "python",
+  "q",
+  "r",
+  "rib",
+  "rsl",
+  "ruby",
+  "rust",
+  "scala",
+  "scheme",
+  "scilab",
+  "scss",
+  "smali",
+  "smalltalk",
+  "sml",
+  "sql",
+  "stylus",
+  "swift",
+  "tcl",
+  "tex",
+  "typescript",
+  "vbnet",
+  "vbscript-html",
+  "vbscript",
+  "vim",
+  "x86asm",
+  "xml"
+]});
 
@@ -54,3 +133,7 @@
 
-    if (highlight.listLanguages().indexOf(lang) !== -1)
+    if (lang === "text") {
+      return util.format('<pre><code class="text">%s</code></pre>', htmlencode.htmlEncode(code));
+    }
+
+    if (highlight.getLanguage(lang))
       return util.format('<pre><code class="%s">%s</code></pre>', lang, highlight.highlight(lang, code).value);
@@ -57,0 +140,0 @@

package.json

 {
   "name": "gitter-markdown-processor",
-  "version": "7.1.3",
+  "version": "7.2.0",
   "description": "parses gitter chat messages, but in its own process",
@@ -8,3 +8,3 @@ "main": "index.js",
     "gitter-marked": "^0.9.0",
-    "highlight.js": "git://github.com/gitterHQ/highlight.js#6523cbb6e3f2a9374ea96e82f977ef57ef8cdf59",
+    "highlight.js": "~8.5.0",
     "htmlencode": "0.0.4",
@@ -11,0 +11,0 @@ "katex": "0.1.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

26549

increased by3.9%

Lines of code

573

increased by16.7%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedhighlight.js@8.5.0(transitive)

• Updatedhighlight.js@~8.5.0