Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
micromark-util-types
Advanced tools
The micromark-util-types package provides TypeScript types for micromark, a markdown parser. These types help in defining and working with various constructs and utilities within the micromark ecosystem.
Token
Defines a token, which is a fundamental unit in the parsing process. Tokens represent segments of the input text with specific types and positions.
const token: Token = { type: 'text', start: { line: 1, column: 1, offset: 0 }, end: { line: 1, column: 5, offset: 4 }, content: 'text' };
Point
Defines a point in the source text, which is used to mark positions such as the start and end of tokens.
const point: Point = { line: 1, column: 1, offset: 0 };
CompileContext
Defines the context used during the compilation phase, providing methods and properties to manage the state and process of converting tokens into the final output.
const compileContext: CompileContext = { sliceSerialize: (token) => 'serialized', stack: [], enter: () => {}, exit: () => {} };
Remark is a markdown processor powered by plugins. It provides a comprehensive set of tools for parsing, transforming, and compiling markdown. Unlike micromark-util-types, which focuses on types for micromark, remark offers a full-fledged processing pipeline with extensive plugin support.
Markdown-it is a markdown parser with a focus on speed and extensibility. It provides a flexible API for parsing and rendering markdown, similar to micromark. However, markdown-it does not provide TypeScript types out of the box, whereas micromark-util-types is specifically designed to offer type definitions for micromark.
Unified is a framework for processing text with syntax trees. It provides a structured approach to parsing, transforming, and compiling various text formats, including markdown. Unified is more general-purpose compared to micromark-util-types, which is specifically tailored for micromark's type definitions.
micromark utility package with TypeScript types.
This package exposes TypeScript types shared throughout the micromark ecosystem.
This package is useful when you are making your own, typed, micromark extensions.
In Node.js (version 16+), install with npm:
npm install micromark-util-types
In Deno with esm.sh
:
import type {Point, /* … */} from 'https://esm.sh/micromark-util-types@1'
/**
* @import {Point} from 'micromark-util-types'
*/
This module exports no identifiers. There is no default export.
See the code for all about the exposed types.
This package is just TypeScript types. It exports lots of different types.
Projects maintained by the unified collective are compatible with maintained versions of Node.js.
When we cut a new major release, we drop support for unmaintained versions of
Node.
This means we try to keep the current release line,
micromark-util-types@2
, compatible with Node.js 16.
This package works with micromark@3
.
This package is safe.
See security.md
in micromark/.github
for how to
submit a security report.
See contributing.md
in micromark/.github
for ways
to get started.
See support.md
for ways to get help.
This project has a code of conduct. By interacting with this repository, organisation, or community you agree to abide by its terms.
FAQs
micromark utility with a couple of typescript types
The npm package micromark-util-types receives a total of 6,897,044 weekly downloads. As such, micromark-util-types popularity was classified as popular.
We found that micromark-util-types demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.