fix: updating Remarkable dependency to resolve subdependency DOS vulnerability

Author: kblanfor

index.js

@@ -26,7 +26,8 @@ module.exports = toc;
  */
 
 function toc(str, options) {
-  return new utils.Remarkable()
+  var Remarkable = utils.Remarkable.Remarkable;
+  return new Remarkable()
     .use(generate(options))
     .render(str);
 }

package.json

@@ -56,7 +56,7 @@
     "minimist": "^1.2.0",
     "mixin-deep": "^1.1.3",
     "object.pick": "^1.2.0",
-    "remarkable": "^1.7.1",
+    "remarkable": "^2.0.0",
     "repeat-string": "^1.6.1",
     "strip-color": "^0.1.0"
   },

test/test.js

@@ -18,7 +18,8 @@ function read(fp) {
 describe('plugin', function() {
   it('should work as a remarkable plugin', function() {
     function render(str, options) {
-      return new utils.Remarkable()
+      var Remarkable = utils.Remarkable.Remarkable;
+      return new Remarkable()
         .use(toc.plugin(options))
         .render(str);
     }