mdast-comment-marker
mdast utility to parse a comment marker
12
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
wooormkmck
Keywords
unistmdastmdast-utilutilutilitymarkercomment
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @types/mdast is a TypeScript type definitions package from the unified ecosystem; adding it as a runtime dep is a standard pattern for this package family and poses no security risk. | ai | |
| phantom-deps | phantom-dep:@types/mdast | AI (phantom-deps): @types/mdast is a TypeScript type declaration package used for type annotations, not runtime imports. This pattern is standard for typed mdast utilities and will persist across versions. | ai | |
| dependencies | unvetted-dep:@types/mdast | AI (dependencies): @types/mdast is the official TypeScript types for mdast, maintained by the same syntax-tree org. It is a legitimate and expected dependency for this package. | ai |