Is marky-markdown safe to use?

marky-markdown has 2 known vulnerabilities on the latest version (12.0.0). DepScope rates its health at 8/100 (critical risk).

What is the latest version of marky-markdown?

The latest version of marky-markdown is 12.0.0, released 2018-01-17.

Does marky-markdown have known vulnerabilities?

Yes. marky-markdown has 2 known vulnerabilities. See depscope.dev/pkg/npm/marky-markdown for details.

Is marky-markdown deprecated?

Yes, marky-markdown is deprecated: Package no longer supported. It contains security vulnerabilities. Please use @npmcorp/marky-markdown. Consider using ? instead.

What are alternatives to marky-markdown?

Popular alternatives to marky-markdown in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does marky-markdown use?

marky-markdown is licensed under ISC.

marky-markdown

npmv12.0.0deprecated

npm's markdown parser

License ISCpermissive71 versions1 maintainers26 deps494 weekly dl

npm/marky-markdown

/ 100

Health

find alternative

marky-markdown is deprecated — find an alternative

Moderate health score (8/100) — verify manually
1 high severity vulnerabilities
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

3/20

popularity

18/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 high1 medium

Advisories (2)

Severity	ID	Summary	Fixed in
high	GHSA-mg69-6j3m-jvgw	HTML Injection in marky-markdown	—
medium	GHSA-pxmp-fwjc-4x7q	HTML Injection in marky-markdown	—

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/marky-markdown