Generated on Apr 1, 2024 via pnpm

Npm

Home

md-to-pdf 2.7.1

CLI tool for converting Markdown files to PDF.

markdown-to-pdf

cli

pdf-generation

Package summary

issues

licenses

Package created

16 Oct 2016

Version published

31 May 2019

Maintainers

Total deps

141

Direct deps

License

Unlicense

Issues

2 critical severity issues

critical

md-to-pdf@2.7.1

Code Injection in md-to-pdf.

Recommendation: Upgrade to version 5.0.0 or later

via: md-to-pdf@2.7.1

md-to-pdf@2.7.1

Code Injection in md-to-pdf.

Recommendation: Upgrade to version 5.0.0 or later

via: md-to-pdf@2.7.1

Collapse

Expand

6 high severity issues

high

marked@0.6.2

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: marked@0.6.2

marked@0.6.2

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: marked@0.6.2

minimatch@3.0.4

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: serve-handler@6.0.1

highlight.js@9.15.8

Deprecated package

via: highlight.js@9.15.8

puppeteer@1.17.0

Deprecated package

via: puppeteer@1.17.0

puppeteer@1.17.0

Package uses install script: "node install.js"

via: puppeteer@1.17.0

Collapse

Expand

2 moderate severity issues

moderate

highlight.js@9.15.8

ReDOS vulnerabities: multiple grammars

Recommendation: Upgrade to version 10.4.1 or later

via: highlight.js@9.15.8

highlight.js@9.15.8

Prototype Pollution in highlight.js

Recommendation: Upgrade to version 9.18.2 or later

via: highlight.js@9.15.8

Collapse

Expand

1 low severity issue

low

marked@0.6.2

Regular Expression Denial of Service in marked

Recommendation: Upgrade to version 0.7.0 or later

via: marked@0.6.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

119 Packages, Including:

@samverschueren/stream-to-observable@0.3.1

agent-base@4.3.0

ansi-escapes@3.2.0

ansi-regex@2.1.1

ansi-regex@3.0.1

ansi-styles@2.2.1

ansi-styles@3.2.1

any-observable@0.3.0

arg@4.1.0

argparse@1.0.10

async-each@1.0.6

async-limiter@1.0.1

balanced-match@1.0.2

binary-extensions@2.3.0

brace-expansion@1.1.11

braces@3.0.2

buffer-crc32@0.2.13

buffer-from@1.1.2

bytes@3.0.0

chalk@1.1.3

chalk@2.4.2

chokidar@3.0.0

cli-cursor@2.1.0

cli-truncate@0.2.1

code-point-at@1.1.0

color-convert@1.9.3

color-name@1.1.3

concat-map@0.0.1

concat-stream@1.6.2

content-disposition@0.5.2

core-util-is@1.0.3

date-fns@1.30.1

debug@2.6.9

debug@3.2.7

debug@4.3.4

elegant-spinner@1.0.1

es6-promise@4.2.8

es6-promisify@5.0.0

escape-string-regexp@1.0.5

extend-shallow@2.0.1

fast-url-parser@1.1.3

fd-slicer@1.1.0

figures@1.7.0

figures@2.0.0

fill-range@7.0.1

fsevents@2.3.3

get-port@5.0.0

gray-matter@4.0.2

has-ansi@2.0.0

has-flag@3.0.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

anymatch@3.1.3

fs.realpath@1.0.0

glob-parent@5.1.2

glob@7.2.3

inflight@1.0.6

inherits@2.0.4

minimatch@3.0.4

minimatch@3.1.2

once@1.4.0

rimraf@2.7.1

signal-exit@3.0.7

wrappy@1.0.2

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

esprima@4.0.1

extract-zip@1.7.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

highlight.js@9.15.8

sprintf-js@1.0.3

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

puppeteer@1.17.0

rxjs@6.6.7

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

md-to-pdf@2.7.1

(WTFPL OR MIT)

Permissive

1 Packages, Including:

path-is-inside@1.0.2

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@1.14.1

(MIT OR CC0-1.0)

Public Domain

1 Packages, Including:

type-fest@0.3.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of md-to-pdf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
arg	4.1.0	5.12 kB	MIT	prod
chalk	2.4.2	9.63 kB	MIT	prod
chokidar	3.0.0	23.21 kB	MIT	prod
get-port	5.0.0	2.87 kB	MIT	prod
gray-matter	4.0.2	11.44 kB	MIT	prod
highlight.js	9.15.8	366.66 kB	BSD-3-Clause	prod	1 2
iconv-lite	0.4.24	180.9 kB	MIT	prod
listr	0.14.3	7.68 kB	MIT	prod peer
marked	0.6.2	23.98 kB	MIT	prod	2 1
puppeteer	1.17.0	129.99 kB	Apache-2.0	prod	2
serve-handler	6.0.1	13.85 kB	MIT	prod	1