← Home

@docusaurus/plugin-content-docs

npm Repository Homepage

Docs plugin for Docusaurus.

55
Versions
MIT
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

fbslorberlex111docusaurus-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
bogus-package bogus-package AI (bogus-package): Spam signals are false positives: 'fb' is legitimate Facebook/Docusaurus org; no-keywords is minor metadata issue. ai
source-diff large-new-source-files AI (source-diff): 30 new files in canary release is expected development activity; no obfuscation or malware indicators. ai
publish-pattern new-deps-added AI (publish-pattern): New deps are all established Docusaurus ecosystem packages; no suspicious additions. ai
provenance publisher-changed AI (provenance): Publisher transition from docusaurus-bot to slorber is consistent with legitimate maintainer handoff within the same organization. ai
dependencies unvetted-dep:schema-dts AI (dependencies): schema-dts is a legitimate, pinned dependency for JSON schema type generation; stable for this package. ai
dependencies unvetted-dep:@docusaurus/module-type-aliases AI (dependencies): Sibling package in the same @docusaurus org scope, published by the same maintainer team; no security concern. ai
dependencies unvetted-dep:webpack AI (dependencies): webpack is a standard build dependency for Docusaurus plugins; version constraint is reasonable. ai
provenance no-provenance AI (provenance): Acceptable for this established publisher; not a security blocker. ai
dependencies unvetted-dep:@types/react-router-config AI (dependencies): Type definitions for react-router-config; standard dev/peer dependency for routing support. ai
phantom-deps phantom-dep:@docusaurus/module-type-aliases AI (phantom-deps): Same-org scoped dependency; expected phantom dep pattern for Docusaurus plugins. ai
phantom-deps phantom-dep:@docusaurus/core AI (phantom-deps): Same-org scoped dependency; expected phantom dep pattern for Docusaurus plugins. ai
phantom-deps phantom-dep:@types/react-router-config AI (phantom-deps): Framework-scoped type definition; expected phantom dep pattern for React-based plugins. ai

Versions (showing 55 of 55)

Hide prereleases
Version Deps Published
3.10.2 18 / 4
3.10.1 18 / 4
3.9.2 18 / 4
3.8.1 18 / 4
3.8.0 18 / 4
3.7.0 17 / 5
3.6.3 17 / 5
3.6.2 17 / 5
3.6.1 17 / 5
3.6.0 17 / 5
3.5.2 17 / 5
3.5.1 17 / 5
3.5.0 17 / 5
3.4.0 16 / 5
3.3.2 16 / 5
3.3.1 16 / 5
3.3.0 16 / 5
3.2.1 16 / 5
3.2.0 16 / 5
3.1.1 15 / 5
3.1.0 15 / 5
3.0.1 15 / 5
3.0.0 15 / 5
2.4.3 16 / 5
2.4.1 16 / 5
2.4.0 16 / 5
2.3.1 16 / 5
2.3.0 16 / 5
2.2.0 16 / 6
2.1.0 16 / 6
2.0.1 16 / 7
2.0.0 16 / 7
3.9.2-canary-6556 18 / 4
3.9.2-canary-6554 18 / 4
3.9.2-canary-6508 18 / 4
3.9.2-canary-6463 18 / 4
3.9.2-canary-6461 18 / 4
3.9.2-canary-6449 18 / 4
3.9.2-canary-6444 18 / 4
3.9.2-canary-6443 18 / 4
3.9.1-canary-6412 18 / 4
3.9.0-canary-6403 18 / 4
3.8.1-canary-6397 18 / 4
3.8.1-canary-6393 18 / 4
3.8.1-canary-6383 18 / 4
3.8.1-canary-6378 18 / 4
3.8.1-canary-6376 18 / 4
3.8.1-canary-6364 18 / 4
3.8.1-canary-6356 18 / 4
3.8.1-canary-6353 18 / 4
3.8.1-canary-6350 18 / 4
3.8.1-canary-6349 18 / 4
3.8.0-canary-6340 18 / 4
3.8.0-canary-6338 18 / 4
3.7.0-canary-6315 18 / 4

v3.10.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.