hexo-renderer-markdown-it
Advanced tools
Comparing version
@@ -15,3 +15,9 @@ 'use strict'; | ||
} | ||
if(markConfig.plugins) { | ||
md = markConfig.plugins.reduce(function(md, p){ | ||
return md.use(require(p)); | ||
}, md); | ||
} | ||
return md.render(data.text); | ||
}; |
{ | ||
"name": "hexo-renderer-markdown-it", | ||
"version": "2.0.3", | ||
"version": "2.1.0", | ||
"description": "Markdown-it is a Markdown parser, done right. A faster and CommonMark compliant alternative for Hexo.", | ||
@@ -46,2 +46,5 @@ "main": "index", | ||
"jshint-stylish": "^1.0.0", | ||
"markdown-it-footnote": "^0.1.0", | ||
"markdown-it-sub": "^0.1.0", | ||
"markdown-it-sup": "^0.1.0", | ||
"mocha": "^2.0.1", | ||
@@ -48,0 +51,0 @@ "rimraf": "^2.2.8" |
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
6816
4.46%37
15.63%14
27.27%1
Infinity%