rehype
HTML processor powered by plugins part of the unified collective
18
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
remcohaszingwooormkmck
Keywords
abstractasthtmlparseprocessrehypeserializestringifysyntaxtreeunified
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @types/hast is a pure TypeScript type definitions package with no executable code; its addition as a runtime dep is standard practice in the unified/rehype ecosystem for type re-exports. | ai | |
| dependencies | unvetted-dep:@types/hast | AI (dependencies): @types/hast is a DefinitelyTyped type-definition package used for TypeScript type exports in the unified ecosystem; no executable risk. | ai | |
| phantom-deps | phantom-dep:@types/hast | AI (phantom-deps): @types/hast is a type-only dependency loaded by convention in the unified/rehype ecosystem; not a hidden code execution concern. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): remcohaszing is a known contributor in the unified/rehype ecosystem; addition is consistent with legitimate team expansion. | ai |