I like docsify but I just got an alert from Dependabot about a security vulnerability from it: > docsify-cli@4.4.3 requires marked@^1.2.9 via a transitive dependency on docsify@4.12.2 Marked in docsify has to be updated to v4.0.10 to fix its denial of service vulnerability.