Mdast-util-to-hast is a widely used npm package that transforms Markdown Abstract Syntax Trees (MDAST) into Hypertext Abstract Syntax Trees (HAST), enabling developers to convert Markdown content into HTML structures programmatically. Comparing version 3.0.1 with the previous stable version 3.0.0 reveals subtle but important enhancements for developers. Both versions share the same core dependencies, including modules for string manipulation (trim, detab), URL handling (mdurl), object extension (xtend), and utilities for working with unist nodes (unist-builder, unist-util-visit, etc.). These dependencies ensure consistent and reliable processing of Markdown content.
The key differences lie in the development dependencies, indicating improvements in the development and testing environment. Version 3.0.1 upgrades several development tools, specifically xo from 0.18.0 to 0.21.0, nyc from 11.0.0 to 12.0.0, browserify from 14.0.0 to 16.0.0, remark-cli from 4.0.0 to 5.0.0, and notably remark-preset-wooorm from 3.0.0 to 4.0.0 and the addition of prettier to version ^1.13.3. These updates likely bring enhanced linting, code coverage, and build processes, improving the overall quality and maintainability of the package. Developers will benefit from a more robust and standardized codebase, leading to fewer potential issues and easier integration into larger projects. The addition of prettier sugests the adoption of a code formatter for consistent code style improving readability and contribution experience. The updated remark-preset-wooorm also suggests enhanced markdown processing and linting capabilities.
All the vulnerabilities related to the version 3.0.1 of the package
Regular Expression Denial of Service in trim
All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().