@backstage-community/plugin-flux
6
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
patriko
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | no-description | AI (npm-metadata): Backstage plugin packages often omit descriptions; not indicative of malice here. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps are established Backstage/Remix icon packages; consistent with UI modernization in this plugin. | ai | |
| dependencies | unvetted-dep:@remixicon/react | AI (dependencies): Legitimate icon library from Remix Icon; no security concerns. | ai | |
| dependencies | unvetted-dep:@material-ui/icons | AI (dependencies): Legitimate Material-UI icons package; standard in Backstage v1 plugin ecosystem. | ai | |
| dependencies | unvetted-dep:@tanstack/react-query-persist-client | AI (dependencies): Legitimate TanStack Query persistence package; widely used in React ecosystem. | ai | |
| dependencies | unvetted-dep:@tanstack/query-sync-storage-persister | AI (dependencies): Legitimate TanStack Query storage persister; widely used in React ecosystem. | ai | |
| phantom-deps | phantom-dep:@backstage/theme | AI (phantom-deps): Common in Backstage monorepo plugins; deps referenced in config/type files rather than direct imports. | ai | |
| dependencies | unvetted-dep:@backstage/theme | AI (dependencies): Well-known Backstage core package; standard dependency for Backstage frontend plugins. | ai | |
| phantom-deps | phantom-dep:use-deep-compare | AI (phantom-deps): Common in Backstage monorepo plugins; deps referenced in config/type files rather than direct imports. | ai | |
| phantom-deps | phantom-dep:@material-ui/core | AI (phantom-deps): Common in Backstage monorepo plugins; deps referenced in config/type files rather than direct imports. | ai | |
| phantom-deps | phantom-dep:@material-ui/icons | AI (phantom-deps): Common in Backstage monorepo plugins; deps referenced in config/type files rather than direct imports. | ai | |
| phantom-deps | phantom-dep:@backstage/catalog-model | AI (phantom-deps): Common in Backstage monorepo plugins; deps referenced in config/type files rather than direct imports. | ai | |
| phantom-deps | phantom-dep:@material-ui/lab | AI (phantom-deps): Common in Backstage monorepo plugins; deps referenced in config/type files rather than direct imports. | ai | |
| dependencies | unvetted-dep:@material-ui/lab | AI (dependencies): Legitimate Material-UI lab package; standard in Backstage v1 plugin ecosystem. | ai |