
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A react component to create a postcast using markdown files.
Postcast requires react and react-dom as peer dependencies.
npm install postcast react react-dom
You can specify a url pointing to a markdown file using the src config:
import React from 'react'
export default () => <Postcast src="/guides/getting-started.md" />
Markdown can be passed using a children function:
<Postcast lang="es-AR">
{() => `#Hola Mundo!`}
</Postcast>
Postcast uses highlight.js internally to parse code fence blocks in markdown. You should load the css file of your choice for highlight themes.
import React from 'react'
// eslint-disable-next-line
import css from 'highlight.js/styles/atom-one-light.css'
export default () => <Postcast src="/guides/getting-started.md" />
src {String}: url pointing to a markdown file.file {File}: a File object that points to a markdown file. If this is present src is ignoredlang {String}: The language in the format IETF. Example: en-US (English as used in the United States)phonemes {Object}: A map of {word: phoneme} to be used for all occurrencies. The phoneme is a String but it must be defined in between /. Example: { yaml: '/yæməl/' }Markdown files can contain YAML configuration blocks (frontmatter). These are the configs that are read by Postcast:
title: If present, it will generate an h1 tag with the title value.lang: If present, it will override the lang configuration.phonemes: if present, it will override the phonemes configuration.FAQs
A react component to create a postcast using markdown
We found that postcast demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.