vendor/heap-classic · vendor documented

Heap Classic puts the app ID in the path

Heap Classic loads cdn.heapanalytics.com/js/heap-{YOUR_APP_ID}.js. The number is the environment ID from Heap Projects. Heap.js 5 heap_config.js is vendor/heap. Server-side /api/track is vendor/heap-track.

What this pack matches

Hosts: cdn.heapanalytics.com
Paths: …/js/heap-…
Vendor docs: developers.heap.io/docs/install-heapjs

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`app_id`	required	It is the Heap environment ID. Heap documents the Classic snippet as `cdn.heapanalytics.com/js/heap-{YOUR_APP_ID}.js`. Fix: Copy the snippet from Heap Projects so the path is `/js/heap-{appId}.js`.	`vendor.heap-classic.param.app_id.missing` `vendor.heap-classic.param.app_id.empty` `vendor.heap-classic.param.app_id.invalid`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/heap-classic

Try this failing payload in the playground. Heap Classic missing app ID.

https://cdn.heapanalytics.com/js/heap-.js

cargo install pixellint · npm install pixellint