remark-react - npm Package Compare versions

Comparing version 6.0.0 to 7.0.0

index.js

@@ -5,3 +5,3 @@ 'use strict'
 
-var toHAST = require('mdast-util-to-hast')
+var toHast = require('mdast-util-to-hast')
 var sanitize = require('hast-util-sanitize')
@@ -20,3 +20,3 @@ var toH = require('hast-to-hyperscript')
   globalFragment = globalReact.Fragment
-} catch (error) {}
+} catch (_) {}
 
@@ -41,4 +41,3 @@ var own = {}.hasOwnProperty
   function h(name, props, children) {
-    // Currently, a warning is triggered by react for *any* white space in
-    // tables.
+    // Currently, React issues a warning for *any* white space in tables.
     // So we remove the pretty lines for now.
@@ -49,3 +48,3 @@ // See: <https://github.com/facebook/react/pull/7081>.
     if (children && tableElements.indexOf(name) !== -1) {
-      children = children.filter(function(child) {
+      children = children.filter(function (child) {
         return child !== '\n'
@@ -64,3 +63,3 @@ })
   function compile(node) {
-    var tree = toHAST(node, toHastOptions)
+    var tree = toHast(node, toHastOptions)
     var root
@@ -67,0 +66,0 @@

package.json

 {
   "name": "remark-react",
-  "version": "6.0.0",
+  "version": "7.0.0",
   "description": "remark plugin to transform to React",
@@ -9,2 +9,3 @@ "license": "MIT",
     "remark",
+    "remark-plugin",
     "plugin",
@@ -19,2 +20,6 @@ "mdast",
   "bugs": "https://github.com/remarkjs/remark-react/issues",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/unified"
+  },
   "author": "Titus Wormer <[e-mail]> (https://wooorm.com)",
@@ -42,18 +47,18 @@ "contributors": [
     "@mapbox/hast-util-table-cell-style": "^0.1.3",
-    "hast-to-hyperscript": "^7.0.0",
+    "hast-to-hyperscript": "^8.0.0",
     "hast-util-sanitize": "^2.0.0",
-    "mdast-util-to-hast": "^6.0.0"
+    "mdast-util-to-hast": "^8.0.0"
   },
   "devDependencies": {
     "is-hidden": "^1.0.0",
-    "not": "^0.1.0",
-    "nyc": "^14.0.0",
-    "prettier": "^1.0.0",
-    "remark": "^10.0.0",
-    "remark-cli": "^6.0.0",
+    "negate": "^1.0.0",
+    "nyc": "^15.0.0",
+    "prettier": "^2.0.0",
+    "remark": "^11.0.0",
+    "remark-cli": "^7.0.0",
     "remark-frontmatter": "^1.0.0",
-    "remark-preset-wooorm": "^5.0.0",
+    "remark-preset-wooorm": "^6.0.0",
     "tape": "^4.0.0",
     "vfile": "^4.0.0",
-    "xo": "^0.24.0"
+    "xo": "^0.28.0"
   },
@@ -85,6 +90,3 @@ "scripts": {
     "rules": {
-      "import/no-extraneous-dependencies": "off",
-      "import/no-unresolved": "off",
-      "import/no-dynamic-require": "off",
-      "max-nested-callbacks": "off",
+      "unicorn/prefer-includes": "off",
       "no-eq-null": "off",
@@ -91,0 +93,0 @@ "eqeqeq": [

readme.md

@@ -23,3 +23,3 @@ # remark-react
 > [`rehype-react`][rehype-react], and although it does support some
-> customisation, it isn’t very pluggable.
+> customization, it isn’t very pluggable.
 > It’s probably better to use `remark-rehype` and `rehype-react` directly to
@@ -40,3 +40,3 @@ > benefit from the [**rehype**][rehype] ecosystem.
 import React from 'react'
-import ReactDOM from 'react-dom'
+import ReactDom from 'react-dom'
 import unified from 'unified'
@@ -72,3 +72,3 @@ import parse from 'remark-parse'
 
-ReactDOM.render(<App />, document.getElementById('root'))
+ReactDom.render(<App />, document.getElementById('root'))
 ```
@@ -136,2 +136,8 @@
 
+## Security
+
+Use of `remark-react` is *safe* by default, but changing the `sanitize` option
+can open you up to a [cross-site scripting (XSS)][xss] attack if the tree is
+unsafe.
+
 ## Contribute
@@ -143,4 +149,4 @@
 
-This project has a [Code of Conduct][coc].
-By interacting with this repository, organisation, or community you agree to
+This project has a [code of conduct][coc].
+By interacting with this repository, organization, or community you agree to
 abide by its terms.
@@ -177,3 +183,3 @@
 
-[chat-badge]: https://img.shields.io/badge/join%20the%20community-on%20spectrum-7b16ff.svg
+[chat-badge]: https://img.shields.io/badge/chat-spectrum-7b16ff.svg
 
@@ -180,0 +186,0 @@ [chat]: https://spectrum.chat/unified/remark

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12173

increased by1.1%

Number of lines in readme file

225

increased by2.74%

Worsened metrics

Lines of code

60

decreased by-1.64%

Dependency changes

• + Added@types/unist@2.0.11(transitive)

• + Addedhast-to-hyperscript@8.1.1(transitive)

• + Addedmdast-util-definitions@2.0.1(transitive)

• + Addedmdast-util-to-hast@8.2.0(transitive)

• + Addedstyle-to-object@0.3.0(transitive)

• + Addedunist-builder@2.0.3(transitive)

• + Addedunist-util-is@4.1.0(transitive)

• + Addedunist-util-visit@2.0.3(transitive)

• + Addedunist-util-visit-parents@3.1.1(transitive)

• - Removedhast-to-hyperscript@7.0.4(transitive)

• - Removedmdast-util-definitions@1.2.5(transitive)

• - Removedmdast-util-to-hast@6.0.2(transitive)

• - Removedobject-assign@4.1.1(transitive)

• - Removedstyle-to-object@0.2.3(transitive)

• - Removedtrim@0.0.1(transitive)

• - Removedunist-builder@1.0.4(transitive)

• Updatedhast-to-hyperscript@^8.0.0

• Updatedmdast-util-to-hast@^8.0.0