
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
js-markdown-extra
Advanced tools
PHP-Markdown-extra compatible Javascript markdown syntax parser
ver 1.2.4
based on PHP Markdown Extra 1.2.5
originally developed by boumankan
js-markdown-extra is a experimental JavaScript port of PHP Markdown Extra.
I couldn't retain complete comaptibility because of difference between PHP's regular expression and JavaScript's one, but it can convert most of simple markdown text. perhaps.
You can try in your hand.
Load this script in HTML and call Markdown
function.
//example :
var html = Markdown( text );
It has possibility of entering infinite loop by some user input because I try to port PHP Markdown Extra with incompatible regular expression test.
This software is based on BSD license.
Free for modification, redistribution and embedding if copyright included.
Shall we not be liable for any damages caused by this software.
1.2.4 - 2013-04-30
FAQs
PHP-Markdown-extra compatible Javascript markdown syntax parser
The npm package js-markdown-extra receives a total of 141 weekly downloads. As such, js-markdown-extra popularity was classified as not popular.
We found that js-markdown-extra demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.