
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
remark-remove-unused-definitions
Advanced tools
remark plugin that removes unused reference definitions from a document
This is a unified (remark) plugin that removes unused reference definitions from a document. Also removes unused GFM footnotes definitions.
While you can get a similar effect by running something like the following:
remark -o --use inline-links --use reference-links your-markdown-file.md
Such a naive approach will destroy all of your carefully considered
alphanumeric reference ids (e.g. the "alphanumeric-id" in
[text][alphanumeric-id])! This plugin only elides unused reference
definitions, leaving the rest intact.
Due to the nature of the unified ecosystem, this package is ESM only and cannot be
require'd.
npm install --save-dev remark-remove-unused-definitions
import { read } from 'to-vfile';
import { remark } from 'remark';
import remarkRemoveUnusedDefs from 'remark-remove-unused-definitions';
const file = await remark()
.use(remarkRemoveUnusedDefs)
.process(await read('example.md'));
console.log(String(file));
remark -o --use remove-unused-definitions README.md
In package.json:
/* … */
"remarkConfig": {
"plugins": [
"remark-remove-unused-definitions"
/* … */
]
},
/* … */
In .remarkrc.js:
module.exports = {
plugins: [
// …
'remove-unused-definitions'
]
};
In .remarkrc.mjs:
import remarkRemoveUnusedDefs from 'remark-remove-unused-definitions';
export default {
plugins: [
// …
remarkRemoveUnusedDefs
]
};
Detailed interface information can be found under docs/.
Suppose we have the following Markdown file example.md:
# Documentation
This [package][1] is [more than][2nd-half-idiom] meets the eye.
## Install [remark][8]
…
[1st-half-idiom]: https://meme-link-1
[2nd-half-idiom]: https://meme-link-2
[1]: https://npm.im/some-package
[2]: #install
[3]: #usage
[4]: #api
[5]: #related
[6]: #contributing-and-support
[7]: #contributors
[8]: https://npm.im/remark
Then running the following JavaScript:
import { read } from 'to-vfile';
import { remark } from 'remark';
import remarkRemoveUnusedDefs from 'remark-remove-unused-definitions';
const file = await remark()
.use(remarkRemoveUnusedDefs)
.process(await read('example.md'));
console.log(String(file));
Would output the following (assuming remark is configured for tight references):
# Documentation
This [package][1] is [more than][2nd-half-idiom] meets the eye.
## Install [remark][8]
…
[2nd-half-idiom]: https://meme-link-2
[1]: https://npm.im/some-package
[8]: https://npm.im/remark
Now all the unused definitions have been deleted. Nice!
Finally, notice how those numeric reference definition ids are not contiguous:
instead of [1] and [2] it's [1] and [8]. Luckily, there exists a remark
plugin that will ensure numeric reference ids flow through the document in
ascending order starting from [1].
[1].New issues and pull requests are always welcome and greatly appreciated! 🤩 Just as well, you can star 🌟 this project to let me know you found it useful! ✊🏿 Thank you!
See CONTRIBUTING.md and SUPPORT.md for more information.
See the table of contributors.
FAQs
remark plugin that removes unused reference definitions from a document
The npm package remark-remove-unused-definitions receives a total of 0 weekly downloads. As such, remark-remove-unused-definitions popularity was classified as not popular.
We found that remark-remove-unused-definitions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.