
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
hexo-renderer-marked-plus
Advanced tools
Add support for Markdown. This plugin uses marked as render engine. This fork enables theme developer to have more control over generated HTML format.
Marked has configurable renderer (do not confuse with Hexo's renderer) for custom HTML formating. Theme developers can override marked renderer within a Hexo theme script:
hexo.markedRenderer = {
init: function() {
// Called before rendering a post
},
heading: function(text, level) {
// Default method can be accessed via:
// this._super.heading(text, level)
return "Your custom heading format"
},
eof: function() {
// Called after marked finish rendering
// Returned string will be appended to output HTML
return '';
}
}
For more information on how to override marked renderer, see here
$ npm install hexo-renderer-marked-plus --save
You can configure this plugin in _config.yml.
marked:
gfm: true
pedantic: false
sanitize: false
tables: true
breaks: true
smartLists: true
smartypants: true
markdown.pl as much as possible. Don't fix any of the original markdown bugs or poor behavior.gfm option to be true.gfm option to be true.FAQs
Markdown renderer plugin for Hexo with configuable renderer
We found that hexo-renderer-marked-plus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.