@backstage/plugin-home
A Backstage plugin that helps you build a home page
7
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
patrikofrebenmarcuseide
Keywords
backstagehomepage
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@material-ui/icons | AI (dependencies): Standard Material-UI icons package; expected in any MUI v4-based Backstage frontend plugin. | ai | |
| dependencies | unvetted-dep:@backstage/theme | AI (dependencies): Official Backstage theming package from the same org; expected dependency for any Backstage frontend plugin. | ai | |
| dependencies | unvetted-dep:@material-ui/lab | AI (dependencies): Well-known Material-UI lab package, standard in Backstage v1 frontend plugins using MUI v4. | ai | |
| dependencies | unvetted-dep:@rjsf/material-ui | AI (dependencies): Legitimate react-jsonschema-form MUI renderer; expected for form-based UI in Backstage plugins. | ai | |
| dependencies | unvetted-dep:react-grid-layout | AI (dependencies): Popular, well-maintained grid layout library; expected for a customizable home page plugin. | ai | |
| phantom-deps | phantom-dep:@backstage/config | AI (phantom-deps): Same org scope; referenced in config files as expected for a Backstage plugin. Not a real phantom dependency risk. | ai | |
| phantom-deps | phantom-dep:@backstage/core-compat-api | AI (phantom-deps): Same org scope; typical Backstage plugin pattern. Not a real phantom dependency risk. | ai | |
| phantom-deps | phantom-dep:@rjsf/utils | AI (phantom-deps): Referenced in config files; @rjsf/utils is a legitimate peer of @rjsf/core and @rjsf/material-ui already declared as dependencies. | ai | |
| provenance | no-provenance | AI (provenance): Backstage is a large established OSS project; lack of Sigstore provenance is common and not a meaningful risk signal here. | ai |