rehype-mdx-import-media No license 2 versions

rehype-mdx-import-media

npm Repository Homepage

Versions

—

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

remcohaszing

hastmdxrehyperehype-pluginunified

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
phantom-deps	phantom-dep:@types/hast	AI (phantom-deps): @types/hast is used for TypeScript type definitions at runtime in this package; not a real phantom dep.	ai	2026/05/04

Version	Deps	Published
1.4.0	5 / 13	2026-03-05
1.3.0	5 / 12	2026-03-04

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.