Skip to content

Conversation

@quantizor
Copy link
Owner

@quantizor quantizor commented Oct 1, 2025

No description provided.

@changeset-bot
Copy link

changeset-bot bot commented Oct 1, 2025

🦋 Changeset detected

Latest commit: 83e6a88

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
markdown-to-jsx Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@socket-security
Copy link

socket-security bot commented Oct 1, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedlightningcss-darwin-arm64@​1.30.1100100398870
Addedlightningcss-darwin-x64@​1.30.1100100398870
Addedlightningcss-freebsd-x64@​1.30.1100100398770
Addedlightningcss-linux-arm-gnueabihf@​1.30.1100100398870
Addedlightningcss-linux-arm64-gnu@​1.30.1100100398870
Addedlightningcss-linux-arm64-musl@​1.30.1100100398870
Addedlightningcss-linux-x64-gnu@​1.30.1100100398870
Addedlightningcss-linux-x64-musl@​1.30.1100100398870
Addedlightningcss-win32-arm64-msvc@​1.30.1100100398770
Addedlightningcss-win32-x64-msvc@​1.30.1100100398870
Added@​esbuild/​openbsd-arm64@​0.25.101001003991100
Added@​tailwindcss/​oxide-android-arm64@​4.1.131001004099100
Added@​tailwindcss/​oxide-darwin-arm64@​4.1.131001004099100
Added@​tailwindcss/​oxide-darwin-x64@​4.1.131001004099100
Added@​tailwindcss/​oxide-linux-arm-gnueabihf@​4.1.131001004099100
Added@​tailwindcss/​oxide-freebsd-x64@​4.1.131001004099100
Added@​tailwindcss/​oxide-linux-arm64-musl@​4.1.131001004099100
Added@​tailwindcss/​oxide-linux-x64-gnu@​4.1.131001004099100
Added@​tailwindcss/​oxide-linux-arm64-gnu@​4.1.131001004099100
Added@​tailwindcss/​oxide-linux-x64-musl@​4.1.131001004099100
Added@​tailwindcss/​oxide-win32-arm64-msvc@​4.1.131001004099100
Added@​tailwindcss/​oxide-win32-x64-msvc@​4.1.131001004099100
Added@​esbuild/​netbsd-arm64@​0.25.101001004091100
Added@​swc/​core-darwin-x64@​1.13.51001004196100
Added@​swc/​core-win32-x64-msvc@​1.13.51001004196100
Added@​swc/​core-linux-x64-gnu@​1.13.51001004196100
Added@​swc/​core-linux-x64-musl@​1.13.51001004196100
Added@​swc/​core-win32-ia32-msvc@​1.13.51001004196100
Added@​swc/​core-linux-arm-gnueabihf@​1.13.51001004196100
Added@​swc/​core-darwin-arm64@​1.13.51001004196100
Added@​swc/​core-linux-arm64-gnu@​1.13.51001004196100
Added@​swc/​core-linux-arm64-musl@​1.13.51001004196100
Added@​swc/​core-win32-arm64-msvc@​1.13.51001004196100
See 97 more rows in the dashboard

View full report

@socket-security
Copy link

socket-security bot commented Oct 1, 2025

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@quantizor quantizor marked this pull request as ready for review October 6, 2025 23:08
cursor[bot]

This comment was marked as outdated.

entry: { 'index.umd': 'index.tsx' },
format: 'iife',
// minify: true,
minify: false,
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Minification Options Present Despite Disabled Minification

The UMD build includes terserOptions even though minify is explicitly set to false. This creates an inconsistent setup where minification is disabled, but its options are still present.

Fix in Cursor Fix in Web

"test": "jest --verbose",
"metrics": "DEBUG=\"${DEBUG:-1}\" node -e \"const fs=await import('fs');const {compiler}=await import('./dist/debug.module.js');console.log('='.repeat(50));compiler(fs.readFileSync('fixture.md','utf8'));\"",
"metrics": "DEBUG=\"${DEBUG:-1}\" node -e \"const fs=await import('fs');const {compiler}=await import('./dist/debug.mjs');console.log('='.repeat(50));compiler(fs.readFileSync('fixture.md','utf8'));\"",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Script Import Path Mismatch

The metrics script now imports from ./dist/debug.mjs. This path might not align with the actual output filename generated by the new tsup build system, which could cause the script to fail.

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants