Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Tool for converting HTML to Markdown, like html2markdown.
online converter: http://island205.github.io/h2m/
$npm install h2m
h2m(html[, options])
var h2m = require('h2m')
var md = h2m('<h1>Hello World</h1>')
// md = '# Hello World'
converter
: the converter you can choose. now support CommonMark
(default) and MarkdownExtra
overides
: custom converter behavior:h2m('<a href="http://island205.github.io/h2m/">h2m</a>', {
overides: {
a: function(node) {
/**
node is an object as the a tag:
{
name: "a",
attrs: {
href: 'http://island205.github.io/h2m/'
},
md: 'h2m'
}
*/
return `[This is an link element](${node.attrs.href})`
}
}
}
// output [This is an link element](http://island205.github.io/h2m/)
$ npm install h2m -g
$h2m -h
Options:
-V, --version output the version number
-f, --file <file> HTML file path or an url adress (default: )
-c, --clipboard read HTML from clipboard
-h, --help output usage information
Convert a local file:
$ h2m -f index.html
converting HTML to Markdown
made by [@island205](https://github.com/island205)
Can't be convert? welcome to submit an [issue](https://github.com/island205/h2m/issues/new).
Convert an online url:
$ h2m -f https://baidu.com
Convert from clipboard:
$ h2m -c
Save result:
$ h2m -f https://google.com > google.md
h2m
supports standard Markdown sytax: CommonMark now and Markdown Extra.
PRs are welcome to implement other extend Markdown language, like Markdown Extra, GFM and so on.
FAQs
Transform HTML to markdown base on posthtml.
The npm package h2m receives a total of 392 weekly downloads. As such, h2m popularity was classified as not popular.
We found that h2m demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.