remarkable

Markdown parser, done right. 100% Commonmark support, extensions, syntax plugins, high speed - all in one.

Latest 2.0.1

NPM

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

The release has no build attestation or trusted-publishing provenance, reducing transparency about how the published artifact was produced, although this is not by itself evidence of an unsafe release.

Release history

The package has 23 releases, but its latest release was over six years ago and it had no releases in the last 12 months, indicating substantial maintenance stagnation.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. A repository push in May 2024 provides some evidence of later activity, but not enough to offset the current inactivity.

Repo issue activity

There were no new or closed issues and no merged pull requests in the last month, while 116 issues and 17 pull requests remain open, suggesting limited recent project responsiveness.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a package with a broad consumer base.

Vulnerabilities

Title	Versions	Severity
CVE-2014-10065 remarkable is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.0 - 1.4.1.	0.0.0 - 1.4.1	Medium
CVE-2019-12041 remarkable is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 1.7.2.	0.0.0 - 1.7.2	High
CVE-2019-12043 remarkable is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.7.2.	0.0.0 - 1.7.2	Medium
CVE-2017-16006 remarkable is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.6.2.	0.0.0 - 1.6.2	Medium