w3bs.AccountStart building
PACKAGES / Profullstack

readm3

Plain text editor for Markdown and code: terminal reader, web and desktop editor (Linux, macOS, Windows), sharing, version history, an API and an MCP server.

ThreatCrush · No malware found
INSTALLw3bs install readm3.com/readm3

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install readm3.com/readm3Install readm3 and track it for updates
  2. readm3Browse Markdown files under the current directory
  3. readm3 <dir>Browse Markdown in a given directory
  4. readm3 --print <file.md>Render a Markdown file to the terminal in color
  5. readm3 edit .Open this folder in the readm3 desktop editor, like subl .
  6. readm3 paste <file>Share a file behind a private link, no account needed
  7. readm3 loginSign in to sync and save documents to your account

Every option: readm3 --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in readm3 0.32.0. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-03 04:49 UTC · threatcrush 0.13.30
Files
138 (installer + github.com/profullstack/readm3)
Findings
2 high · 22 medium · 7 low
31 other findings (not malware)
  • high
    unescaped HTML renderingsource/site/admin.ts:258js-unescaped-html-sink · CWE-79
  • high
    unescaped HTML renderingsource/site/history-panel.ts:129js-unescaped-html-sink · CWE-79
  • medium
    predictable temporary file pathsource/.github/workflows/ci.yml:92insecure-temp-file · CWE-377
  • medium
    SQL built from a template literal or f-stringsource/server/operations.ts:337sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/server/store.ts:171sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/server/store.ts:178sql-template-interpolation · CWE-89
  • medium
    unescaped HTML renderingsource/site/admin.ts:172js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/admin.ts:268js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/admin.ts:281js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/admin.ts:376js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/admin.ts:528js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/admin.ts:569js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/admin.ts:643js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/admin.ts:655js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/ai-dialog.ts:34js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/ask-panel.ts:49js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/code-view.ts:54js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/sharing.ts:246js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/site/viewer.ts:751js-unescaped-html-sink · CWE-79
  • medium
    regex with nested unbounded quantifierssource/src/code.ts:234redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/src/code.ts:244redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/src/code.ts:250redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/src/sensitive.ts:55redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/src/sensitive.ts:88redos-nested-quantifier · CWE-1333
  • low
    outbound request to a non-constant URLsource/server/test/oauth.test.ts:75js-ssrf-outbound-request · CWE-918
  • low
    outbound request to a non-constant URLsource/server/test/oauth.test.ts:79js-ssrf-outbound-request · CWE-918
  • low
    Database URL with credentialssource/site/test/sharing.spec.ts:505secret-database-url · CWE-798
  • low
    AWS Access Keysource/test/sensitive.test.ts:15secret-aws-access-key · CWE-798
  • low
    Private Keysource/test/sensitive.test.ts:18secret-private-key · CWE-798
  • low
    JSON Web Tokensource/test/sensitive.test.ts:19secret-jwt · CWE-798
  • low
    Database URL with credentialssource/test/sensitive.test.ts:24secret-database-url · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/readm3.com/readm3/badge.svg)](https://w3bs.org/packages/readm3.com/readm3)