Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
markdown-it-attrs-es5
Advanced tools
This package is based on markdown-it-attrs
. It did not contains an ES5 module. Importing the module directly or indirectly may break web apps running on ES5 browsers.
On npm install
, this package will transpile your version of markdown-it-attrs
to make it compatible with ES5 browsers. Then in your code, you use markdown-it-attrs-es5
instead of markdown-it-attrs
.
Package authors should consider importing this package instead of markdown-it-attrs
, so your packages will not break your users due to having markdown-it-attrs
as a transient dependency.
To install in your project, run:
npm install markdown-it markdown-it-attrs markdown-it-attrs-es5
You can also use it in HTML:
<script src="https://unpkg.com/markdown-it-attrs-es5/dist/markdown-it-attrs-es5.production.min.js"></script>
On postinstall
, this package will run esbuild
to bundle markdown-it-attrs
into a single file. Then run Babel to transpile it for ES5.
This package peer-depends on markdown-it-attrs
. Thus, you can select your own version of markdown-it-attrs
.
markdown-it-attrs
When you update markdown-it-attrs
, re-run npm install markdown-it-attrs-es5
to get the latest package transpiled.
Instead of importing this package, there are alternative workarounds you can use.
You can copy the source code of markdown-it-attrs
into your web app and use your build pipeline transpile the original package.
Be sure to include the original license and continue to depends on the package to make sure npm audit
will scan for vulnerabilities.
Some bundlers is configured not to transpile code under /node_modules/
unless specified explicitly. You can modify bundler configuration to include /node_modules/markdown-it-attrs/
and use Babel to transpile it while bundling.
Like us? Star us.
Want to make it better? File us an issue.
Don't like something you see? Submit a pull request.
FAQs
Unknown package
We found that markdown-it-attrs-es5 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.