Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Feb 16, 2024 via pnpm

react-markdown 4.2.1

Renders Markdown as React components
Package summary
Share
5
issues
1
critical severity
license
1
3
high severity
vulnerability
1
meta
2
1
moderate severity
meta
1
4
licenses
48
MIT
4
BSD-2-Clause
1
ISC
1
N/A
Package created
9 May 2015
Version published
2 Sep 2019
Maintainers
3
Total deps
54
Direct deps
9
License
MIT

Issues

5

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: remark-parse@5.0.0
Collapse
Expand

3 high severity issues

high
Recommendation: Upgrade to version 0.0.3 or later
via: remark-parse@5.0.0
via: html-to-react@1.7.0 & others
via: remark-parse@5.0.0
Collapse
Expand

1 moderate severity issue

moderate
via: remark-parse@5.0.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
48 Packages, Including:
@types/unist@2.0.10
bail@1.0.5
character-entities-legacy@1.1.4
character-entities@1.2.4
character-reference-invalid@1.1.4
collapse-white-space@1.0.6
dom-serializer@2.0.0
extend@3.0.2
html-to-react@1.7.0
htmlparser2@9.1.0
is-alphabetical@1.0.4
is-alphanumerical@1.0.4
is-buffer@1.1.6
is-decimal@1.0.4
is-hexadecimal@1.0.4
is-plain-obj@1.1.0
is-whitespace-character@1.0.4
is-word-character@1.0.4
js-tokens@4.0.0
lodash.camelcase@4.3.0
loose-envify@1.4.0
markdown-escapes@1.0.4
mdast-add-list-metadata@1.0.1
object-assign@4.1.1
parse-entities@1.2.2
prop-types@15.8.1
react-is@16.13.1
react-markdown@4.2.1
react@16.14.0
remark-parse@5.0.0
repeat-string@1.6.1
replace-ext@1.0.0
state-toggle@1.0.3
trim-trailing-lines@1.1.4
trough@1.0.5
unherit@1.1.3
unified@6.2.0
unist-util-is@3.0.0
unist-util-remove-position@1.1.4
unist-util-stringify-position@1.1.2
unist-util-visit-parents@1.1.2
unist-util-visit-parents@2.1.2
unist-util-visit@1.4.1
vfile-location@2.0.6
vfile-message@1.1.1
vfile@2.3.0
x-is-string@0.1.0
xtend@4.0.2

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
4 Packages, Including:
domelementtype@2.3.0
domhandler@5.0.3
domutils@3.1.0
entities@4.5.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
inherits@2.0.4

N/A

N/A
1 Packages, Including:
trim@0.0.1
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

9
All Dependencies CSV
β“˜ This is a list of react-markdown 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
html-to-react1.7.015.94 kBMIT
prod
1
mdast-add-list-metadata1.0.12.96 kBMIT
prod
prop-types15.8.122.12 kBMIT
prod
react-is16.13.15.33 kBMIT
prod
react16.14.059.16 kBMIT
prod peer
1
remark-parse5.0.025.34 kBMIT
prod
1
2
1
unified6.2.011.53 kBMIT
prod
unist-util-visit1.4.12.86 kBMIT
prod
xtend4.0.22.47 kBMIT
prod

Visualizations

Frequently Asked Questions

What does react-markdown do?

React-Markdown is a highly popular npm package designed to render markdown in your React applications. Its primary functionality revolves around accepting markdown strings and converting them into a virtual DOM, thereby allowing you to render the parsed markdown as React elements. Not only is React-Markdown safe by default (preventing dangerouslySetInnerHTML or XSS attacks), but it also supports components and plugins, providing an efficient and secure way to incorporate markdown rendering into your development projects.

How do you use react-markdown?

To use React-Markdown, you first need to install the package into your project using npm. The command for this is npm install react-markdown. Once you've successfully installed React-Markdown, you'll need to add a simple import statement: import Markdown from 'react-markdown'; at the beginning of your file to access its features.

For a basic usage example, suppose you have a markdown string like const markdown = '# Hi, *Pluto*!';. To render this string as markdown, pass it within the React-Markdown component in your render method like so:

import React from 'react';
import ReactDom from 'react-dom';
import Markdown from 'react-markdown';

const markdown = '# Hi, *Pluto*!';

ReactDom.render(<Markdown>{markdown}</Markdown>, document.body);

This will render a headline saying "Hi, Pluto!" in italics as interpreted from the markdown string. For more advanced use cases involving plugins and custom components, refer to the extensive examples provided in the React-Markdown's GitHub repository readme section.

Where are the react-markdown docs?

The extensive documentation for React-Markdown can be found on its GitHub repository. The readme file on this repository includes everything you need to get started, including installation instructions, basic and advanced usage examples, plugin information, and API details. Also, it explains security measures and how to use React-Markdown with JSX.