@docusaurus/plugin-content-pages
Pages plugin for Docusaurus.
100
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
fbslorberlex111docusaurus-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Docusaurus canary releases are published via GitHub Actions CI/CD by design. SLSA provenance attestation confirms the build originates from the official facebook/docusaurus repo. This pattern is stable for this package. | ai | |
| dependencies | unvetted-dep:webpack | AI (dependencies): webpack is a standard, widely-trusted build tool and a legitimate dependency for Docusaurus plugins; this finding is a stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@docusaurus/core | AI (phantom-deps): @docusaurus/core is a same-org monorepo sibling dependency; the phantom-dep finding is a false positive for this intra-monorepo package structure. | ai |
Versions (showing 100 of 170)
Showing 100 of 170
Next page →
v3.10.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.