alanshaw / alanshaw/markdown-pdf

Replace phantomjs for rendering

未关闭
#213 2 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
JavaScript
星标
2.9k
派生
253
PR 合并指标
30 天内没有已合并 PR

描述

[phantomjs](https://github.com/ariya/phantomjs) development is [suspended](https://github.com/ariya/phantomjs/issues/15344) and should be replaced.

[Puppeteer](https://pptr.dev/) is probably a good candidate.

### `npm install` output:

> npm WARN deprecated har-validator@5.1.5: this library is no longer supported
> npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
> npm WARN deprecated phantomjs-prebuilt@2.1.16: this package is now deprecated
> npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
>
> added 91 packages, and audited 294 packages in 48s
>
> 19 packages are looking for funding
> run `npm fund` for details
>
> 3 vulnerabilities (2 moderate, 1 high)
>
> Some issues need review, and may require choosing
> a different dependency.
>
> Run `npm audit` for details.

### `npm audit` output

> \# npm audit report
>
> markdown-pdf *
> Severity: high
> markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS) - https://github.com/advisories/GHSA-qghr-877h-f9jh
> Depends on vulnerable versions of phantomjs-prebuilt
> No fix available
> node_modules/markdown-pdf
>
> request *
> Severity: moderate
> Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6
> No fix available
> node_modules/request
> phantomjs-prebuilt *
> Depends on vulnerable versions of request
> node_modules/phantomjs-prebuilt
>
> 3 vulnerabilities (2 moderate, 1 high)
>
> Some issues need review, and may require choosing
> a different dependency.

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。