search

mapbox / rehype-prism

rehype plugin to highlight code blocks in HTML with Prism (via refractor)
MIT License
178 stars 24 forks source link

mrm package is a dependency but is unused #33

Open rdmurphy opened 2 years ago

rdmurphy commented 2 years ago

Unless I'm super missing something (always possible!) I don't see where the mrm package gets used anywhere.

https://github.com/mapbox/rehype-prism/blob/fb4174fce30a1cde8d784fa94e7c04d8a7fa6d28/package.json#L33

This is unfortunately the cause of some security issues being flagged on this library.

russellpekala commented 2 years ago

Seeing these as well. Tried to make PR but I don't think the security settings on this work for non mapbox people