alanshaw / alanshaw/markdown-pdf

Replace phantomjs for rendering

未關閉
#213 2 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
JavaScript
星號
2.9k
分支
253
PR 合併指標
30 天內沒有已合併 PR

描述

[phantomjs](https://github.com/ariya/phantomjs) development is [suspended](https://github.com/ariya/phantomjs/issues/15344) and should be replaced.

[Puppeteer](https://pptr.dev/) is probably a good candidate.

### `npm install` output:

> npm WARN deprecated har-validator@5.1.5: this library is no longer supported
> npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
> npm WARN deprecated phantomjs-prebuilt@2.1.16: this package is now deprecated
> npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
>
> added 91 packages, and audited 294 packages in 48s
>
> 19 packages are looking for funding
> run `npm fund` for details
>
> 3 vulnerabilities (2 moderate, 1 high)
>
> Some issues need review, and may require choosing
> a different dependency.
>
> Run `npm audit` for details.

### `npm audit` output

> \# npm audit report
>
> markdown-pdf *
> Severity: high
> markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS) - https://github.com/advisories/GHSA-qghr-877h-f9jh
> Depends on vulnerable versions of phantomjs-prebuilt
> No fix available
> node_modules/markdown-pdf
>
> request *
> Severity: moderate
> Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6
> No fix available
> node_modules/request
> phantomjs-prebuilt *
> Depends on vulnerable versions of request
> node_modules/phantomjs-prebuilt
>
> 3 vulnerabilities (2 moderate, 1 high)
>
> Some issues need review, and may require choosing
> a different dependency.

貢獻指南

這個儲存庫沒有索引到貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。