Is markdown-it-toc safe to use?

markdown-it-toc has 1 known vulnerabilities on the latest version (1.1.0). DepScope rates its health at 46/100 (high risk).

What is the latest version of markdown-it-toc?

The latest version of markdown-it-toc is 1.1.0, released 2015-04-09.

Does markdown-it-toc have known vulnerabilities?

Yes. markdown-it-toc has 1 known vulnerabilities. See depscope.dev/pkg/npm/markdown-it-toc for details.

Is markdown-it-toc deprecated?

No, markdown-it-toc is actively maintained. Latest release: 1.1.0 (2015-04-09).

What are alternatives to markdown-it-toc?

Popular alternatives to markdown-it-toc in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does markdown-it-toc use?

markdown-it-toc is licensed under MIT.

markdown-it-toc

npmv1.1.0

Adds syntax for an automatically generated table of contents to markdown-it markdown parser.

License MITpermissive4 versions1 maintainers0 deps1,278 weekly dl

samchrisinger/markdown-it-toc

/ 100

Health

use with caution

[email protected] low health (46/100) — consider alternatives

Moderate health score (46/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

23/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2020-28455	markdown-it-toc Cross-site Scripting due to title of generated toc and contents of header not being escaped	—

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/markdown-it-toc