remark-vdom - npm Package Compare versions

Comparing version 8.0.0 to 9.0.0

package.json

 {
   "name": "remark-vdom",
-  "version": "8.0.0",
+  "version": "9.0.0",
   "description": "remark plugin to compile Markdown to VDOM",
@@ -9,2 +9,3 @@ "license": "MIT",
     "remark",
+    "remark-plugin",
     "plugin",
@@ -23,2 +24,6 @@ "mdast",
   "bugs": "https://github.com/remarkjs/remark-vdom/issues",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/unified"
+  },
   "author": "Titus Wormer <[e-mail]> (https://wooorm.com)",
@@ -32,5 +37,5 @@ "contributors": [
   "dependencies": {
-    "hast-to-hyperscript": "^7.0.0",
+    "hast-to-hyperscript": "^8.0.0",
     "hast-util-sanitize": "^2.0.0",
-    "mdast-util-to-hast": "^6.0.0",
+    "mdast-util-to-hast": "^8.0.0",
     "virtual-dom": "^2.1.1"
@@ -40,11 +45,11 @@ },
     "browserify": "^16.0.0",
-    "nyc": "^14.0.0",
-    "prettier": "^1.0.0",
-    "remark": "^10.0.0",
-    "remark-cli": "^6.0.0",
-    "remark-preset-wooorm": "^5.0.0",
+    "nyc": "^15.0.0",
+    "prettier": "^2.0.0",
+    "remark": "^11.0.0",
+    "remark-cli": "^7.0.0",
+    "remark-preset-wooorm": "^6.0.0",
     "tape": "^4.0.0",
     "tinyify": "^2.0.0",
     "vdom-to-html": "^2.0.0",
-    "xo": "^0.24.0"
+    "xo": "^0.28.0"
   },
@@ -51,0 +56,0 @@ "scripts": {

readme.md

@@ -126,3 +126,3 @@ # remark-vdom
 
-How to sanitise the output (`Object` or `boolean`, default: `null`).
+How to sanitize the output (`Object` or `boolean`, default: `null`).
 
@@ -132,3 +132,3 @@ Sanitation is done by [`hast-util-sanitize`][sanitize], except when `false` is
 If an object is passed in, it’s given as a schema to `sanitize`.
-By default, input is sanitised according to [GitHub’s sanitation rules][github].
+By default, input is sanitized according to [GitHub’s sanitation rules][github].
 
@@ -153,3 +153,3 @@ Embedded HTML is **always** stripped.
 
-Optimisation [hint][] (`string`, default: `h-`).
+Optimization [hint][] (`string`, default: `h-`).
 
@@ -184,2 +184,8 @@ ###### `options.h`
 
+## Security
+
+Use of `remark-vdom` is *safe* by default, but changing the `sanitize` option
+can open you up to a [cross-site scripting (XSS)][xss] attack if the tree is
+unsafe.
+
 ## Related
@@ -204,4 +210,4 @@
 
-This project has a [Code of Conduct][coc].
-By interacting with this repository, organisation, or community you agree to
+This project has a [code of conduct][coc].
+By interacting with this repository, organization, or community you agree to
 abide by its terms.
@@ -237,3 +243,3 @@
 
-[chat-badge]: https://img.shields.io/badge/join%20the%20community-on%20spectrum-7b16ff.svg
+[chat-badge]: https://img.shields.io/badge/chat-spectrum-7b16ff.svg
 
@@ -269,1 +275,3 @@ [chat]: https://spectrum.chat/unified/remark
 [hint]: https://github.com/Matt-Esch/virtual-dom/tree/master/virtual-hyperscript#key
+
+[xss]: https://en.wikipedia.org/wiki/Cross-site_scripting

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

11495

increased by2.97%

Number of lines in readme file

271

increased by3.04%

Dependency changes

• + Added@types/unist@2.0.11(transitive)

• + Addedhast-to-hyperscript@8.1.1(transitive)

• + Addedmdast-util-definitions@2.0.1(transitive)

• + Addedmdast-util-to-hast@8.2.0(transitive)

• + Addedstyle-to-object@0.3.0(transitive)

• + Addedunist-builder@2.0.3(transitive)

• + Addedunist-util-is@4.1.0(transitive)

• + Addedunist-util-visit@2.0.3(transitive)

• + Addedunist-util-visit-parents@3.1.1(transitive)

• - Removedhast-to-hyperscript@7.0.4(transitive)

• - Removedmdast-util-definitions@1.2.5(transitive)

• - Removedmdast-util-to-hast@6.0.2(transitive)

• - Removedobject-assign@4.1.1(transitive)

• - Removedstyle-to-object@0.2.3(transitive)

• - Removedtrim@0.0.1(transitive)

• - Removedunist-builder@1.0.4(transitive)

• - Removedunist-util-is@3.0.0(transitive)

• - Removedunist-util-visit@1.4.1(transitive)

• - Removedunist-util-visit-parents@2.1.2(transitive)

• Updatedhast-to-hyperscript@^8.0.0

• Updatedmdast-util-to-hast@^8.0.0