rehype-autolink-headings
rehype plugin to add links to headings
16
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
wooormkmck
Keywords
unifiedrehyperehype-pluginpluginheadinglinkhtml
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @ungap/structured-clone is a well-known, legitimate polyfill maintained by the ungap project. Its addition is consistent with the package's purpose and the wooorm ecosystem's upgrade patterns. | ai | |
| dependencies | unvetted-dep:@types/hast | AI (dependencies): @types/hast is a TypeScript type-definition package with no runtime code; it poses no security risk for this package. | ai | |
| phantom-deps | phantom-dep:unified | AI (phantom-deps): unified is a peer dependency in the rehype/unified ecosystem; its presence in package.json without direct import is standard practice for this plugin. | ai | |
| phantom-deps | phantom-dep:@types/hast | AI (phantom-deps): @types/hast is a type-only dependency loaded by TypeScript convention, not directly imported at runtime. | ai |