pkg.sopackage field notes

brew / rank 3835

Install cmark with Homebrew

Strongly specified, highly compatible implementation of Markdown. Version 0.31.2 via Homebrew; verified from local package data.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install cmark

provider-native install command

overview

Package summary

Strongly specified, highly compatible implementation of Markdown

Commands and aliases

  • cmark

history

Project history and usage

cmark is the C reference implementation of CommonMark, providing both a libcmark parsing/rendering library and a cmark command-line program. It exists to make Markdown behavior testable, portable, fast, and consistent across implementations.

Project history

CommonMark grew out of the need for an unambiguous Markdown specification after years of divergent Markdown implementations. The CommonMark site says the effort started in 2014 with implementers and large-scale Markdown users, and the cmark README credits John MacFarlane with the original library and program alongside contributors to parsing, optimization, links, emphasis, APIs, and tests.

Adoption history

The CommonMark site reports implementations for dozens of programming languages and lists adopters including Discourse, GitHub, GitLab, Reddit, Qt, Stack Overflow/Stack Exchange, and Swift. The batch input lists cmark packages across Homebrew, Alpine, Debian, Fedora, MacPorts, Nix, Arch, Ubuntu, and openSUSE/zypper.

How it is used

The cmark program parses CommonMark documents and renders HTML, groff man, LaTeX, CommonMark, or XML AST output. The library exposes an AST for programmatic manipulation and is wrapped by bindings for multiple languages; the README also documents security behavior around raw HTML and unsafe links.

Why package nerds care

cmark is important because it gives package ecosystems a small, fast, C99, dependency-light implementation of a standardized Markdown dialect. It is a common build or test dependency for projects that want Markdown rendering without inheriting each host language's quirks.

Timeline

  • 2004: Markdown is released by John Gruber with Aaron Swartz, providing the background problem CommonMark later addresses.
  • 2014: CommonMark publishes early spec versions, with 0.5 and 0.6 appearing in October.
  • 2015: the current commonmark/cmark GitHub repository is created.
  • 2024: CommonMark spec 0.31.2 is listed as the latest spec version on spec.commonmark.org.

Related projects

  • cmark is related to the CommonMark spec, commonmark.js, cmark-gfm, Markdown.pl, Babelmark, and language bindings for Go, Haskell, Ruby, Lua, Perl, Python, R, Scala, and PHP listed in the README.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
cmarkexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version0.31.2
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:cmark
Version0.31.2
Package managerHomebrew
Homepagehttps://commonmark.org/
Repositoryhttps://github.com/commonmark/cmark
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation