
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
💖 Using webpack? You may want vmark-loader ➡️
yarn add vmark
Basically you can write Markdown code alongside <script> and <style> tags, and these tags work just like how it is in a normal .vue file.
In:
# Show off some counter
<counter :start="0" />
<script>
import counter from './counter.vue'
export default {
components: {
counter
}
}
</script>
Out:
<template>
<div class="vmark">
<h1>Show off some counter</h1>
<counter :start="0" />
</div>
</template>
<script>
import counter from './counter.vue'
export default {
components: {
counter
}
}
</script>
Code:
const component = vmark(input)
// Get the component in SFC format
Automatically transform:
```vue {insert: 'below'}
<button>Button</button>
```
Into:
```vue
<button>Button</button>
```
<button>Button</button>
insert can also be above.
Type: string
Required: true
Input markdown string.
Options for markdown-it.
(md: MarkdownIt) => voidA function whose first argument is the MarkdownIt instance.
(html: string) => stringhtml => `<div class="vmark">${html}</div>`Wrap the HTML in an element, because the <template> block in Vue SFC doesn't allow multiple root elements. You can use this option to wrap HTML inside a Vue component:
const wrapHTML = html => `<render-html>${html}</render-html>`
Then inside the <render-html> component, you can access the html like this:
<template>
<div class="content">
<!-- `html` is available as default slot -->
<slot name="default"></slot>
</div>
</template>
git checkout -b my-new-featuregit commit -am 'Add some feature'git push origin my-new-featurevmark © egoist, Released under the MIT License.
Authored and maintained by egoist with help from contributors (list).
github.com/egoist · GitHub @egoist · Twitter @_egoistlily
FAQs
Convert markdown to vue component.
We found that vmark demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.