
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
recma-stringify
Advanced tools
recma plugin to add support for serializing JavaScript.
This package is a unified (recma) plugin that defines how to take a syntax tree as input and turn it into JavaScript. When it’s used, JavaScript is serialized as the final result.
See the monorepo readme for info on what the recma ecosystem is.
This plugin adds support to unified for serializing JavaScript.
If you also need to parse JavaScript,
you can alternatively use recma,
which combines unified,
this plugin,
and recma-parse.
If you don’t use plugins and have access to the syntax tree,
you can directly use estree-util-to-js,
which is used inside this plugin.
recma focusses on making it easier to transform code by abstracting such
internals away.
This package is ESM only. In Node.js (version 16+), install with npm:
npm install recma-stringify
In Deno with esm.sh:
import recmaStringify from 'https://esm.sh/recma-stringify@1'
In browsers with esm.sh:
<script type="module">
import recmaStringify from 'https://esm.sh/recma-stringify@1?bundle'
</script>
Say we have the following module example.js:
import recmaJsx from 'recma-jsx'
import recmaStringify from 'recma-stringify'
import rehypeParse from 'rehype-parse'
import rehypeRecma from 'rehype-recma'
import {unified} from 'unified'
const file = await unified()
.use(rehypeParse, {fragment: true})
.use(rehypeRecma)
.use(recmaJsx)
.use(recmaStringify)
.process('<p>Hi!<h1>Hello!')
console.log(String(file))
…running that with node example.js yields:
<><p>{"Hi!"}</p><h1>{"Hello!"}</h1></>;
This package exports no identifiers.
The default export is recmaStringify.
unified().use(recmaStringify[, options])Plugin to add support for serializing to JavaScript.
options (Options, optional)
— configurationNothing (undefined).
OptionsConfiguration (TypeScript type).
Same as Options
from estree-util-to-js.
Passing filePath is not supported as it is handled for you.
JS is serialized according to ECMA-262, which is also followed by all browsers and engines such as Node.js.
The syntax tree format used in recma is esast and estree.
This package is fully typed with TypeScript.
It exports the additional type
Options.
Projects maintained by the unified collective are compatible with maintained versions of Node.js.
When we cut a new major release,
we drop support for unmaintained versions of Node.
This means we try to keep the current release line,
recma-strignify@1,
compatible with Node.js 16.
As recma works on JS and evaluating JS is unsafe, use of recma can also be unsafe. Do not evaluate unsafe code.
Use of recma plugins could also open you up to other attacks. Carefully assess each plugin and the risks involved in using them.
For info on how to submit a report, see our security policy.
See § Contribute on our site for ways to get started. See § Support for ways to get help.
This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.
Remark is a markdown processor built on the unified framework, similar to recma-stringify, but it focuses on parsing and transforming markdown rather than compiling MDX to JavaScript. It provides a wide range of plugins for processing markdown content.
Rehype is another processor in the unified ecosystem, designed for processing HTML. While recma-stringify focuses on MDX to JavaScript compilation, rehype is used for transforming HTML content, making it suitable for different use cases in content transformation.
Babel is a JavaScript compiler that transforms modern JavaScript into a version compatible with older environments. While recma-stringify is specific to MDX, Babel is a more general-purpose tool for JavaScript transformation, often used in conjunction with other tools to handle JSX and other modern JavaScript features.
FAQs
recma plugin to serialize JavaScript
The npm package recma-stringify receives a total of 2,397,755 weekly downloads. As such, recma-stringify popularity was classified as popular.
We found that recma-stringify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.