
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@zachleat/heading-anchors
Advanced tools
Adds and positions sibling anchor links for heading elements (h1,h2,h3,h4,h5,h6) when they have an `id` attribute.
<heading-anchors> Web ComponentA web component to add and position sibling anchor links for heading elements (h1–h6) when they have an id attribute.
Inspired by David Darnes’ <heading-anchors>.
npm install @zachleat/heading-anchors
Include the heading-anchors.js file on your web site (via <script type="module">) and use <heading-anchors>.
font styling of the heading (font-family, line-height, font-size, and font-weight)selector attribute to change the headings used, e.g. <heading-anchors selector="h2,h3,h4">
h2,h3,h4,h5,h6prefix attribute to change the accessible text inside the anchor links, e.g. <heading-anchors prefix="Ir a la sección titulada">
Jump to section titledcontent attribute to change the character used.
#, supports an empty string if you want to use CSS pseudo elements..ha-placeholder selector (change font-family, etc).data-ha-exclude attribute to opt-out of an anchor link.(Optional) There is a small layout shift by the addition of the # character. Add this CSS to make room for this pre-component definition:
heading-anchors:not(:defined) :is(h2,h3,h4,h5,h6):after {
content: "#";
padding: 0 .25em;
opacity: 0;
}
FAQs
Adds and positions sibling anchor links for heading elements (h1,h2,h3,h4,h5,h6) when they have an `id` attribute.
The npm package @zachleat/heading-anchors receives a total of 405 weekly downloads. As such, @zachleat/heading-anchors popularity was classified as not popular.
We found that @zachleat/heading-anchors demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.