alanshaw / alanshaw/markdown-pdf
Replace phantomjs for rendering
- 主要语言
- JavaScript
- 星标
- 2.9k
- 派生
- 253
- PR 合并指标
- 30 天内没有已合并 PR
描述
[phantomjs](https://github.com/ariya/phantomjs) development is [suspended](https://github.com/ariya/phantomjs/issues/15344) and should be replaced.
[Puppeteer](https://pptr.dev/) is probably a good candidate.
### `npm install` output:
> npm WARN deprecated har-validator@5.1.5: this library is no longer supported
> npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
> npm WARN deprecated phantomjs-prebuilt@2.1.16: this package is now deprecated
> npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
>
> added 91 packages, and audited 294 packages in 48s
>
> 19 packages are looking for funding
> run `npm fund` for details
>
> 3 vulnerabilities (2 moderate, 1 high)
>
> Some issues need review, and may require choosing
> a different dependency.
>
> Run `npm audit` for details.
### `npm audit` output
> \# npm audit report
>
> markdown-pdf *
> Severity: high
> markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS) - https://github.com/advisories/GHSA-qghr-877h-f9jh
> Depends on vulnerable versions of phantomjs-prebuilt
> No fix available
> node_modules/markdown-pdf
>
> request *
> Severity: moderate
> Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6
> No fix available
> node_modules/request
> phantomjs-prebuilt *
> Depends on vulnerable versions of request
> node_modules/phantomjs-prebuilt
>
> 3 vulnerabilities (2 moderate, 1 high)
>
> Some issues need review, and may require choosing
> a different dependency.
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。