fix: remove html comments from package description and deprecation notices (#1397)

Author: TheAlexLichter

app/composables/useMarkdown.ts

@@ -37,6 +37,9 @@ function stripAndEscapeHtml(text: string, packageName?: string): string {
   // Only match tags that start with a letter or / (to avoid matching things like "a < b > c")
   stripped = stripped.replace(/<\/?[a-z][^>]*>/gi, '')
 
+  // Strip HTML comments: <!-- ... --> (including unclosed comments from truncation)
+  stripped = stripped.replace(/<!--[\s\S]*?(-->|$)/g, '')
+
   if (packageName) {
     // Trim first to handle leading/trailing whitespace from stripped HTML
     stripped = stripped.trim()

test/nuxt/composables/use-markdown.spec.ts

@@ -318,4 +318,36 @@ describe('useMarkdown', () => {
       expect(processed.value).toBe('bold and <strong>also bold</strong>')
     })
   })
+
+  describe('HTML comment stripping', () => {
+    it('strips HTML comments', () => {
+      const processed = useMarkdown({ text: '<!-- automd:badges color=yellow -->A library' })
+      expect(processed.value).toBe('A library')
+    })
+
+    it('strips HTML comments from the middle of text', () => {
+      const processed = useMarkdown({ text: 'Before <!-- comment --> after' })
+      expect(processed.value).toBe('Before  after')
+    })
+
+    it('strips multiple HTML comments', () => {
+      const processed = useMarkdown({ text: '<!-- first -->Text <!-- second -->here' })
+      expect(processed.value).toBe('Text here')
+    })
+
+    it('strips multiline HTML comments', () => {
+      const processed = useMarkdown({ text: '<!-- multi\nline\ncomment -->Text' })
+      expect(processed.value).toBe('Text')
+    })
+
+    it('returns empty string when description is only a comment', () => {
+      const processed = useMarkdown({ text: '<!-- automd:badges color=yellow -->' })
+      expect(processed.value).toBe('')
+    })
+
+    it('strips unclosed HTML comments (truncated)', () => {
+      const processed = useMarkdown({ text: 'A library <!-- automd:badges color=yel' })
+      expect(processed.value).toBe('A library ')
+    })
+  })
 })