@readme/markdown 6.43.1 → 6.45.0

package/components/HTMLBlock/index.jsx

@@ -2,6 +2,7 @@
  */
 const React = require('react');
 const PropTypes = require('prop-types');
+const escape = require('lodash.escape');
 
 const MATCH_SCRIPT_TAGS = /<script\b[^>]*>([\s\S]*?)<\/script *>\n?/gim;
 
@@ -15,13 +16,6 @@ const extractScripts = (html = '') => {
   return [cleaned, () => scripts.map(js => window.eval(js))];
 };
 
-/**
- * @hack: https://stackoverflow.com/a/30930653/659661
- */
-const escapeHTML = html => {
-  return document.createElement('div').appendChild(document.createTextNode(html)).parentNode.innerHTML;
-};
-
 class HTMLBlock extends React.Component {
   constructor(props) {
     super(props);
@@ -39,7 +33,7 @@ class HTMLBlock extends React.Component {
     if (safeMode) {
       return (
         <pre className="html-unsafe">
-          <code>{escapeHTML(html)}</code>
+          <code dangerouslySetInnerHTML={{ __html: escape(html) }} />
         </pre>
       );
     }

package/dist/main.js

@@ -9713,6 +9713,8 @@ var React = __webpack_require__(4466);
 
 var PropTypes = __webpack_require__(5697);
 
+var escape = __webpack_require__(8686);
+
 var MATCH_SCRIPT_TAGS = /<script\b[^>]*>([\s\S]*?)<\/script *>\n?/gim;
 
 var extractScripts = function extractScripts() {
@@ -9731,14 +9733,6 @@ var extractScripts = function extractScripts() {
     });
   }];
 };
-/**
- * @hack: https://stackoverflow.com/a/30930653/659661
- */
-
-
-var escapeHTML = function escapeHTML(html) {
-  return document.createElement('div').appendChild(document.createTextNode(html)).parentNode.innerHTML;
-};
 
 var HTMLBlock = /*#__PURE__*/function (_React$Component) {
   "use strict";
@@ -9779,7 +9773,11 @@ var HTMLBlock = /*#__PURE__*/function (_React$Component) {
       if (safeMode) {
         return /*#__PURE__*/React.createElement("pre", {
           className: "html-unsafe"
-        }, /*#__PURE__*/React.createElement("code", null, escapeHTML(html)));
+        }, /*#__PURE__*/React.createElement("code", {
+          dangerouslySetInnerHTML: {
+            __html: escape(html)
+          }
+        }));
       }
 
       return /*#__PURE__*/React.createElement("div", {
@@ -29262,16 +29260,51 @@ module.exports.sanitize = function (sanitizeSchema) {
 /***/ }),
 
 /***/ 4792:
-/***/ ((module, __unused_webpack_exports, __webpack_require__) => {
+/***/ ((module) => {
 
-var toString = __webpack_require__(6034);
+/* @note: copied from https://github.com/rehypejs/rehype-minify/blob/main/packages/hast-util-to-string/index.js
+ */
+function toString(node) {
+  if ('children' in node) {
+    // eslint-disable-next-line no-use-before-define
+    return all(node);
+  }
 
-module.exports = function () {
-  return function compile(node) {
-    return toString(node);
-  };
+  return 'value' in node ? node.value : ' ';
+}
+
+function one(node) {
+  if (node.type === 'text') {
+    return node.value;
+  } // eslint-disable-next-line no-use-before-define
+
+
+  return 'children' in node ? all(node) : ' ';
+}
+
+function all(node) {
+  var index = -1;
+  var result = []; // eslint-disable-next-line no-plusplus
+
+  while (++index < node.children.length) {
+    result[index] = one(node.children[index]);
+  }
+
+  return result.join(' ').trim().replace(/ +/, ' ');
+}
+
+var Compiler = function Compiler(node) {
+  return toString(node);
+};
+
+var toPlainText = function toPlainText() {
+  Object.assign(this, {
+    Compiler: Compiler
+  });
 };
 
+module.exports = toPlainText;
+
 /***/ }),
 
 /***/ 9620:
@@ -32811,72 +32844,6 @@ function isLiteral(node) {
 }
 
 
-/***/ }),
-
-/***/ 6034:
-/***/ ((module) => {
-
-"use strict";
-/**
- * @fileoverview
- *   Get the plain-text value of a hast node.
- * @longdescription
- *   ## Use
- *
- *   ```js
- *   var h = require('hastscript')
- *   var toString = require('hast-util-to-string')
- *
- *   toString(h('p', 'Alpha'))
- *   //=> 'Alpha'
- *   toString(h('div', [h('b', 'Bold'), ' and ', h('i', 'italic'), '.']))
- *   //=> 'Bold and italic.'
- *   ```
- *
- *   ## API
- *
- *   ### `toString(node)`
- *
- *   Transform a node to a string.
- */
-
-
-
-module.exports = toString
-
-function toString(node) {
-  // “The concatenation of data of all the Text node descendants of the context
-  // object, in tree order.”
-  if ('children' in node) {
-    return all(node)
-  }
-
-  // “Context object’s data.”
-  return 'value' in node ? node.value : ''
-}
-
-function one(node) {
-  if (node.type === 'text') {
-    return node.value
-  }
-
-  return node.children ? all(node) : ''
-}
-
-function all(node) {
-  var children = node.children
-  var length = children.length
-  var index = -1
-  var result = []
-
-  while (++index < length) {
-    result[index] = one(children[index])
-  }
-
-  return result.join('')
-}
-
-
 /***/ }),
 
 /***/ 3560:
@@ -33636,6 +33603,227 @@ function wordCharacter(character) {
 }
 
 
+/***/ }),
+
+/***/ 8686:
+/***/ ((module, __unused_webpack_exports, __webpack_require__) => {
+
+/**
+ * lodash (Custom Build) <https://lodash.com/>
+ * Build: `lodash modularize exports="npm" -o ./`
+ * Copyright jQuery Foundation and other contributors <https://jquery.org/>
+ * Released under MIT license <https://lodash.com/license>
+ * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+ * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+ */
+
+/** Used as references for various `Number` constants. */
+var INFINITY = 1 / 0;
+
+/** `Object#toString` result references. */
+var symbolTag = '[object Symbol]';
+
+/** Used to match HTML entities and HTML characters. */
+var reUnescapedHtml = /[&<>"'`]/g,
+    reHasUnescapedHtml = RegExp(reUnescapedHtml.source);
+
+/** Used to map characters to HTML entities. */
+var htmlEscapes = {
+  '&': '&amp;',
+  '<': '&lt;',
+  '>': '&gt;',
+  '"': '&quot;',
+  "'": '&#39;',
+  '`': '&#96;'
+};
+
+/** Detect free variable `global` from Node.js. */
+var freeGlobal = typeof __webpack_require__.g == 'object' && __webpack_require__.g && __webpack_require__.g.Object === Object && __webpack_require__.g;
+
+/** Detect free variable `self`. */
+var freeSelf = typeof self == 'object' && self && self.Object === Object && self;
+
+/** Used as a reference to the global object. */
+var root = freeGlobal || freeSelf || Function('return this')();
+
+/**
+ * The base implementation of `_.propertyOf` without support for deep paths.
+ *
+ * @private
+ * @param {Object} object The object to query.
+ * @returns {Function} Returns the new accessor function.
+ */
+function basePropertyOf(object) {
+  return function(key) {
+    return object == null ? undefined : object[key];
+  };
+}
+
+/**
+ * Used by `_.escape` to convert characters to HTML entities.
+ *
+ * @private
+ * @param {string} chr The matched character to escape.
+ * @returns {string} Returns the escaped character.
+ */
+var escapeHtmlChar = basePropertyOf(htmlEscapes);
+
+/** Used for built-in method references. */
+var objectProto = Object.prototype;
+
+/**
+ * Used to resolve the
+ * [`toStringTag`](http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)
+ * of values.
+ */
+var objectToString = objectProto.toString;
+
+/** Built-in value references. */
+var Symbol = root.Symbol;
+
+/** Used to convert symbols to primitives and strings. */
+var symbolProto = Symbol ? Symbol.prototype : undefined,
+    symbolToString = symbolProto ? symbolProto.toString : undefined;
+
+/**
+ * The base implementation of `_.toString` which doesn't convert nullish
+ * values to empty strings.
+ *
+ * @private
+ * @param {*} value The value to process.
+ * @returns {string} Returns the string.
+ */
+function baseToString(value) {
+  // Exit early for strings to avoid a performance hit in some environments.
+  if (typeof value == 'string') {
+    return value;
+  }
+  if (isSymbol(value)) {
+    return symbolToString ? symbolToString.call(value) : '';
+  }
+  var result = (value + '');
+  return (result == '0' && (1 / value) == -INFINITY) ? '-0' : result;
+}
+
+/**
+ * Checks if `value` is object-like. A value is object-like if it's not `null`
+ * and has a `typeof` result of "object".
+ *
+ * @static
+ * @memberOf _
+ * @since 4.0.0
+ * @category Lang
+ * @param {*} value The value to check.
+ * @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+ * @example
+ *
+ * _.isObjectLike({});
+ * // => true
+ *
+ * _.isObjectLike([1, 2, 3]);
+ * // => true
+ *
+ * _.isObjectLike(_.noop);
+ * // => false
+ *
+ * _.isObjectLike(null);
+ * // => false
+ */
+function isObjectLike(value) {
+  return !!value && typeof value == 'object';
+}
+
+/**
+ * Checks if `value` is classified as a `Symbol` primitive or object.
+ *
+ * @static
+ * @memberOf _
+ * @since 4.0.0
+ * @category Lang
+ * @param {*} value The value to check.
+ * @returns {boolean} Returns `true` if `value` is a symbol, else `false`.
+ * @example
+ *
+ * _.isSymbol(Symbol.iterator);
+ * // => true
+ *
+ * _.isSymbol('abc');
+ * // => false
+ */
+function isSymbol(value) {
+  return typeof value == 'symbol' ||
+    (isObjectLike(value) && objectToString.call(value) == symbolTag);
+}
+
+/**
+ * Converts `value` to a string. An empty string is returned for `null`
+ * and `undefined` values. The sign of `-0` is preserved.
+ *
+ * @static
+ * @memberOf _
+ * @since 4.0.0
+ * @category Lang
+ * @param {*} value The value to process.
+ * @returns {string} Returns the string.
+ * @example
+ *
+ * _.toString(null);
+ * // => ''
+ *
+ * _.toString(-0);
+ * // => '-0'
+ *
+ * _.toString([1, 2, 3]);
+ * // => '1,2,3'
+ */
+function toString(value) {
+  return value == null ? '' : baseToString(value);
+}
+
+/**
+ * Converts the characters "&", "<", ">", '"', "'", and "\`" in `string` to
+ * their corresponding HTML entities.
+ *
+ * **Note:** No other characters are escaped. To escape additional
+ * characters use a third-party library like [_he_](https://mths.be/he).
+ *
+ * Though the ">" character is escaped for symmetry, characters like
+ * ">" and "/" don't need escaping in HTML and have no special meaning
+ * unless they're part of a tag or unquoted attribute value. See
+ * [Mathias Bynens's article](https://mathiasbynens.be/notes/ambiguous-ampersands)
+ * (under "semi-related fun fact") for more details.
+ *
+ * Backticks are escaped because in IE < 9, they can break out of
+ * attribute values or HTML comments. See [#59](https://html5sec.org/#59),
+ * [#102](https://html5sec.org/#102), [#108](https://html5sec.org/#108), and
+ * [#133](https://html5sec.org/#133) of the
+ * [HTML5 Security Cheatsheet](https://html5sec.org/) for more details.
+ *
+ * When working with HTML you should always
+ * [quote attribute values](http://wonko.com/post/html-escaping) to reduce
+ * XSS vectors.
+ *
+ * @static
+ * @since 0.1.0
+ * @memberOf _
+ * @category String
+ * @param {string} [string=''] The string to escape.
+ * @returns {string} Returns the escaped string.
+ * @example
+ *
+ * _.escape('fred, barney, & pebbles');
+ * // => 'fred, barney, &amp; pebbles'
+ */
+function escape(string) {
+  string = toString(string);
+  return (string && reHasUnescapedHtml.test(string))
+    ? string.replace(reUnescapedHtml, escapeHtmlChar)
+    : string;
+}
+
+module.exports = escape;
+
+
 /***/ }),
 
 /***/ 5683:
@@ -52175,7 +52363,7 @@ function astToPlainText(node) {
   var _setup16 = _slicedToArray(_setup15, 2);
 
   opts = _setup16[1];
-  return processor(opts).use(toPlainText).runSync(node);
+  return processor(opts).use(toPlainText).stringify(node);
 }
 /**
  *  compile mdast to ReadMe-flavored markdown

package/dist/main.node.js

@@ -9713,6 +9713,8 @@ var React = __webpack_require__(4466);
 
 var PropTypes = __webpack_require__(5697);
 
+var escape = __webpack_require__(8686);
+
 var MATCH_SCRIPT_TAGS = /<script\b[^>]*>([\s\S]*?)<\/script *>\n?/gim;
 
 var extractScripts = function extractScripts() {
@@ -9731,14 +9733,6 @@ var extractScripts = function extractScripts() {
     });
   }];
 };
-/**
- * @hack: https://stackoverflow.com/a/30930653/659661
- */
-
-
-var escapeHTML = function escapeHTML(html) {
-  return document.createElement('div').appendChild(document.createTextNode(html)).parentNode.innerHTML;
-};
 
 var HTMLBlock = /*#__PURE__*/function (_React$Component) {
   "use strict";
@@ -9779,7 +9773,11 @@ var HTMLBlock = /*#__PURE__*/function (_React$Component) {
       if (safeMode) {
         return /*#__PURE__*/React.createElement("pre", {
           className: "html-unsafe"
-        }, /*#__PURE__*/React.createElement("code", null, escapeHTML(html)));
+        }, /*#__PURE__*/React.createElement("code", {
+          dangerouslySetInnerHTML: {
+            __html: escape(html)
+          }
+        }));
       }
 
       return /*#__PURE__*/React.createElement("div", {
@@ -12084,16 +12082,51 @@ module.exports.sanitize = function (sanitizeSchema) {
 /***/ }),
 
 /***/ 4792:
-/***/ ((module, __unused_webpack_exports, __webpack_require__) => {
+/***/ ((module) => {
 
-var toString = __webpack_require__(6034);
+/* @note: copied from https://github.com/rehypejs/rehype-minify/blob/main/packages/hast-util-to-string/index.js
+ */
+function toString(node) {
+  if ('children' in node) {
+    // eslint-disable-next-line no-use-before-define
+    return all(node);
+  }
 
-module.exports = function () {
-  return function compile(node) {
-    return toString(node);
-  };
+  return 'value' in node ? node.value : ' ';
+}
+
+function one(node) {
+  if (node.type === 'text') {
+    return node.value;
+  } // eslint-disable-next-line no-use-before-define
+
+
+  return 'children' in node ? all(node) : ' ';
+}
+
+function all(node) {
+  var index = -1;
+  var result = []; // eslint-disable-next-line no-plusplus
+
+  while (++index < node.children.length) {
+    result[index] = one(node.children[index]);
+  }
+
+  return result.join(' ').trim().replace(/ +/, ' ');
+}
+
+var Compiler = function Compiler(node) {
+  return toString(node);
+};
+
+var toPlainText = function toPlainText() {
+  Object.assign(this, {
+    Compiler: Compiler
+  });
 };
 
+module.exports = toPlainText;
+
 /***/ }),
 
 /***/ 9620:
@@ -15633,72 +15666,6 @@ function isLiteral(node) {
 }
 
 
-/***/ }),
-
-/***/ 6034:
-/***/ ((module) => {
-
-"use strict";
-/**
- * @fileoverview
- *   Get the plain-text value of a hast node.
- * @longdescription
- *   ## Use
- *
- *   ```js
- *   var h = require('hastscript')
- *   var toString = require('hast-util-to-string')
- *
- *   toString(h('p', 'Alpha'))
- *   //=> 'Alpha'
- *   toString(h('div', [h('b', 'Bold'), ' and ', h('i', 'italic'), '.']))
- *   //=> 'Bold and italic.'
- *   ```
- *
- *   ## API
- *
- *   ### `toString(node)`
- *
- *   Transform a node to a string.
- */
-
-
-
-module.exports = toString
-
-function toString(node) {
-  // “The concatenation of data of all the Text node descendants of the context
-  // object, in tree order.”
-  if ('children' in node) {
-    return all(node)
-  }
-
-  // “Context object’s data.”
-  return 'value' in node ? node.value : ''
-}
-
-function one(node) {
-  if (node.type === 'text') {
-    return node.value
-  }
-
-  return node.children ? all(node) : ''
-}
-
-function all(node) {
-  var children = node.children
-  var length = children.length
-  var index = -1
-  var result = []
-
-  while (++index < length) {
-    result[index] = one(children[index])
-  }
-
-  return result.join('')
-}
-
-
 /***/ }),
 
 /***/ 3560:
@@ -16474,6 +16441,227 @@ function wordCharacter(character) {
 }
 
 
+/***/ }),
+
+/***/ 8686:
+/***/ ((module) => {
+
+/**
+ * lodash (Custom Build) <https://lodash.com/>
+ * Build: `lodash modularize exports="npm" -o ./`
+ * Copyright jQuery Foundation and other contributors <https://jquery.org/>
+ * Released under MIT license <https://lodash.com/license>
+ * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+ * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+ */
+
+/** Used as references for various `Number` constants. */
+var INFINITY = 1 / 0;
+
+/** `Object#toString` result references. */
+var symbolTag = '[object Symbol]';
+
+/** Used to match HTML entities and HTML characters. */
+var reUnescapedHtml = /[&<>"'`]/g,
+    reHasUnescapedHtml = RegExp(reUnescapedHtml.source);
+
+/** Used to map characters to HTML entities. */
+var htmlEscapes = {
+  '&': '&amp;',
+  '<': '&lt;',
+  '>': '&gt;',
+  '"': '&quot;',
+  "'": '&#39;',
+  '`': '&#96;'
+};
+
+/** Detect free variable `global` from Node.js. */
+var freeGlobal = typeof global == 'object' && global && global.Object === Object && global;
+
+/** Detect free variable `self`. */
+var freeSelf = typeof self == 'object' && self && self.Object === Object && self;
+
+/** Used as a reference to the global object. */
+var root = freeGlobal || freeSelf || Function('return this')();
+
+/**
+ * The base implementation of `_.propertyOf` without support for deep paths.
+ *
+ * @private
+ * @param {Object} object The object to query.
+ * @returns {Function} Returns the new accessor function.
+ */
+function basePropertyOf(object) {
+  return function(key) {
+    return object == null ? undefined : object[key];
+  };
+}
+
+/**
+ * Used by `_.escape` to convert characters to HTML entities.
+ *
+ * @private
+ * @param {string} chr The matched character to escape.
+ * @returns {string} Returns the escaped character.
+ */
+var escapeHtmlChar = basePropertyOf(htmlEscapes);
+
+/** Used for built-in method references. */
+var objectProto = Object.prototype;
+
+/**
+ * Used to resolve the
+ * [`toStringTag`](http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)
+ * of values.
+ */
+var objectToString = objectProto.toString;
+
+/** Built-in value references. */
+var Symbol = root.Symbol;
+
+/** Used to convert symbols to primitives and strings. */
+var symbolProto = Symbol ? Symbol.prototype : undefined,
+    symbolToString = symbolProto ? symbolProto.toString : undefined;
+
+/**
+ * The base implementation of `_.toString` which doesn't convert nullish
+ * values to empty strings.
+ *
+ * @private
+ * @param {*} value The value to process.
+ * @returns {string} Returns the string.
+ */
+function baseToString(value) {
+  // Exit early for strings to avoid a performance hit in some environments.
+  if (typeof value == 'string') {
+    return value;
+  }
+  if (isSymbol(value)) {
+    return symbolToString ? symbolToString.call(value) : '';
+  }
+  var result = (value + '');
+  return (result == '0' && (1 / value) == -INFINITY) ? '-0' : result;
+}
+
+/**
+ * Checks if `value` is object-like. A value is object-like if it's not `null`
+ * and has a `typeof` result of "object".
+ *
+ * @static
+ * @memberOf _
+ * @since 4.0.0
+ * @category Lang
+ * @param {*} value The value to check.
+ * @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+ * @example
+ *
+ * _.isObjectLike({});
+ * // => true
+ *
+ * _.isObjectLike([1, 2, 3]);
+ * // => true
+ *
+ * _.isObjectLike(_.noop);
+ * // => false
+ *
+ * _.isObjectLike(null);
+ * // => false
+ */
+function isObjectLike(value) {
+  return !!value && typeof value == 'object';
+}
+
+/**
+ * Checks if `value` is classified as a `Symbol` primitive or object.
+ *
+ * @static
+ * @memberOf _
+ * @since 4.0.0
+ * @category Lang
+ * @param {*} value The value to check.
+ * @returns {boolean} Returns `true` if `value` is a symbol, else `false`.
+ * @example
+ *
+ * _.isSymbol(Symbol.iterator);
+ * // => true
+ *
+ * _.isSymbol('abc');
+ * // => false
+ */
+function isSymbol(value) {
+  return typeof value == 'symbol' ||
+    (isObjectLike(value) && objectToString.call(value) == symbolTag);
+}
+
+/**
+ * Converts `value` to a string. An empty string is returned for `null`
+ * and `undefined` values. The sign of `-0` is preserved.
+ *
+ * @static
+ * @memberOf _
+ * @since 4.0.0
+ * @category Lang
+ * @param {*} value The value to process.
+ * @returns {string} Returns the string.
+ * @example
+ *
+ * _.toString(null);
+ * // => ''
+ *
+ * _.toString(-0);
+ * // => '-0'
+ *
+ * _.toString([1, 2, 3]);
+ * // => '1,2,3'
+ */
+function toString(value) {
+  return value == null ? '' : baseToString(value);
+}
+
+/**
+ * Converts the characters "&", "<", ">", '"', "'", and "\`" in `string` to
+ * their corresponding HTML entities.
+ *
+ * **Note:** No other characters are escaped. To escape additional
+ * characters use a third-party library like [_he_](https://mths.be/he).
+ *
+ * Though the ">" character is escaped for symmetry, characters like
+ * ">" and "/" don't need escaping in HTML and have no special meaning
+ * unless they're part of a tag or unquoted attribute value. See
+ * [Mathias Bynens's article](https://mathiasbynens.be/notes/ambiguous-ampersands)
+ * (under "semi-related fun fact") for more details.
+ *
+ * Backticks are escaped because in IE < 9, they can break out of
+ * attribute values or HTML comments. See [#59](https://html5sec.org/#59),
+ * [#102](https://html5sec.org/#102), [#108](https://html5sec.org/#108), and
+ * [#133](https://html5sec.org/#133) of the
+ * [HTML5 Security Cheatsheet](https://html5sec.org/) for more details.
+ *
+ * When working with HTML you should always
+ * [quote attribute values](http://wonko.com/post/html-escaping) to reduce
+ * XSS vectors.
+ *
+ * @static
+ * @since 0.1.0
+ * @memberOf _
+ * @category String
+ * @param {string} [string=''] The string to escape.
+ * @returns {string} Returns the escaped string.
+ * @example
+ *
+ * _.escape('fred, barney, & pebbles');
+ * // => 'fred, barney, &amp; pebbles'
+ */
+function escape(string) {
+  string = toString(string);
+  return (string && reHasUnescapedHtml.test(string))
+    ? string.replace(reUnescapedHtml, escapeHtmlChar)
+    : string;
+}
+
+module.exports = escape;
+
+
 /***/ }),
 
 /***/ 5683:
@@ -34520,7 +34708,7 @@ function astToPlainText(node) {
   var _setup16 = _babel_runtime_helpers_slicedToArray__WEBPACK_IMPORTED_MODULE_1___default()(_setup15, 2);
 
   opts = _setup16[1];
-  return processor(opts).use(toPlainText).runSync(node);
+  return processor(opts).use(toPlainText).stringify(node);
 }
 /**
  *  compile mdast to ReadMe-flavored markdown

package/package.json

@@ -2,7 +2,7 @@
   "name": "@readme/markdown",
   "description": "ReadMe's React-based Markdown parser",
   "author": "Rafe Goldberg <rafe@readme.io>",
-  "version": "6.43.1",
+  "version": "6.45.0",
   "main": "dist/main.node.js",
   "browser": "dist/main.js",
   "files": [
@@ -31,7 +31,7 @@
     "@readme/syntax-highlighter": "^11.0.0",
     "copy-to-clipboard": "^3.3.1",
     "hast-util-sanitize": "^4.0.0",
-    "hast-util-to-string": "^1.0.4",
+    "lodash.escape": "^4.0.1",
     "lodash.kebabcase": "^4.1.1",
     "mdast-util-toc": "^5.1.0",
     "path-browserify": "^1.0.1",