@docusaurus/cssnano-preset
Advanced cssnano preset for maximum optimization.
35
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
fbslorberlex111docusaurus-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:cssnano-preset-advanced | AI (dependencies): cssnano-preset-advanced is a well-known, legitimate PostCSS/cssnano plugin; stable dependency for this Docusaurus CSS optimization preset. | ai | |
| dependencies | unvetted-dep:postcss-sort-media-queries | AI (dependencies): postcss-sort-media-queries is a legitimate CSS processing utility; standard dependency for a cssnano preset. | ai | |
| provenance | no-provenance | AI (provenance): Provenance attestation is a best-practice recommendation, not a security requirement; established package with strong publisher track record. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher transition from slorber to docusaurus-bot is documented and legitimate within the Docusaurus org. | ai | |
| bogus-package | bogus-package | AI (bogus-package): False positive: 'fb' refers to Facebook (Docusaurus sponsor), not spam; minimal README is appropriate for a preset package; keywords optional for scoped packages. | ai |
Versions (showing 35 of 35)
| Version | Deps | Published |
|---|---|---|
| 3.10.2 | 4 / 1 | |
| 3.10.1 | 4 / 1 | |
| 3.10.0 | 4 / 1 | |
| 3.9.2 | 4 / 1 | |
| 3.9.1 | 4 / 1 | |
| 3.9.0 | 4 / 1 | |
| 3.8.1 | 4 / 1 | |
| 3.8.0 | 4 / 1 | |
| 3.7.0 | 4 / 1 | |
| 3.6.3 | 4 / 1 | |
| 3.6.2 | 4 / 1 | |
| 3.6.1 | 4 / 1 | |
| 3.6.0 | 4 / 1 | |
| 3.5.2 | 4 / 1 | |
| 3.5.1 | 4 / 1 | |
| 3.5.0 | 4 / 1 | |
| 3.4.0 | 4 / 1 | |
| 3.3.2 | 4 / 1 | |
| 3.3.0 | 4 / 1 | |
| 3.2.1 | 4 / 1 | |
| 3.2.0 | 4 / 1 | |
| 3.1.1 | 4 / 1 | |
| 3.1.0 | 4 / 1 | |
| 3.0.1 | 4 / 1 | |
| 3.0.0 | 4 / 1 | |
| 2.4.3 | 4 / 1 | |
| 2.4.2 | 4 / 1 | |
| 2.4.1 | 4 / 1 | |
| 2.4.0 | 4 / 1 | |
| 2.3.1 | 4 / 1 | |
| 2.3.0 | 4 / 1 | |
| 2.2.0 | 4 / 1 | |
| 2.1.0 | 4 / 1 | |
| 2.0.1 | 4 / 1 | |
| 2.0.0 | 4 / 1 |
v3.10.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.