Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
marked-man
Advanced tools
marked-man README.md > doc/foo.1
# works too with stdin
cat README.md | marked-man --version 1.0 | man /dev/stdin
See also marked documentation.
marked-man
wraps marked
to extend it with groff output support in order to
create Unix manual pages for use with man
.
It follows the ronn
markdown level-1 header format:
# name(section) -- short description
which populates the HEADER section, and the NAME section (if none is already written) of the manpage.
marked-man
is a marked
CLI extension, meaning options can be passed directly to marked.
The --breaks
option, which retains intra-paragraph line breaks, is now true by default. Use --no-breaks
to disable it.
marked-man
adds some options to marked
's existing options, to be able to override the header/footer of generated man pages.
--name <name>
Optional, overrides name
in ronn header.
--section <section>
Optional, overrides section
in ronn header. Defaults to 1.
--description <description>
Optional, overrides description
in ronn header.
--version <version>
The version shown in the manpage footer.
Optional, when omitted, defaults to the target node module version, or empty.
--manual <manual>
The manual-group name shown in the manpage header.
Optional, when omitted, man displays a value matching the section.
--date <date>
The date shown in the manpage header.
Optional, defaults to now.
Must be acceptable to new Date(string or timestamp)
.
Honors SOURCE_DATE_EPOCH
environment variable for reproducible builds.
See your node package manager manual...
For example:
npx marked-man simple.md
To view this README as a man page, run something like the following:
marked-man README.md | man /dev/stdin
import markedMan from 'marked-man';
import marked from 'marked';
marked.use(markedMan);
FAQs
wrapper adding manpage output to 'marked', inspired by 'ronn'
The npm package marked-man receives a total of 16,055 weekly downloads. As such, marked-man popularity was classified as popular.
We found that marked-man demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.