@mintlify/prebuild
Helpful functions for Mintlify's prebuild step
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@apidevtools/swagger-parser | AI (phantom-deps): Likely used for types/parsing indirectly; established Mintlify package, low risk. | ai | |
| phantom-deps | phantom-dep:fs-extra | AI (phantom-deps): Likely used in compiled dist output; benign for this well-established build helper package. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers are Mintlify employees (ruhanponnada, kathrynmintlify, kylefinken); org-internal change. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from individual account to GitHub Actions CI publishing; consistent with org CI/CD migration. | ai | |
| license | uncommon-license:Elastic-2.0 | AI (license): Elastic-2.0 is Mintlify's standard license across their packages. | ai | |
| phantom-deps | phantom-dep:gray-matter | AI (phantom-deps): gray-matter is referenced in config files but not directly imported; consistent with other accepted phantom deps in this package. | ai | |
| provenance | no-provenance | AI (provenance): Provenance attestation is uncommon across npm (~12%); absence is not a security disqualifier for this established package. | ai | |
| phantom-deps | phantom-dep:openapi-types | AI (phantom-deps): Legitimate types-only package; phantom detection expected for type-only imports in TypeScript projects. | ai | |
| dependencies | unvetted-dep:favicons | AI (dependencies): favicons is a well-known, legitimate favicon generation library; appropriate dependency for a documentation prebuild tool. | ai | |
| dependencies | unvetted-dep:sharp-ico | AI (dependencies): sharp-ico is a legitimate ICO format plugin for the sharp image library, which is also a direct dep; appropriate for favicon/image processing in prebuild. | ai | |
| phantom-deps | phantom-dep:front-matter | AI (phantom-deps): Legitimate package; phantom detection likely due to indirect/type-level usage in a TypeScript build context. | ai | |
| phantom-deps | phantom-dep:unist-util-visit | AI (phantom-deps): Legitimate unist utility; phantom detection likely due to indirect usage pattern in TypeScript build. | ai | |
| dependencies | unvetted-dep:@mintlify/common | AI (dependencies): Same-org scoped package from Mintlify; expected internal dependency across all @mintlify/* packages. | ai | |
| phantom-deps | phantom-dep:@mintlify/openapi-parser | AI (phantom-deps): Same-org package; phantom dep finding is a code quality note, not a security risk for this package. | ai | |
| dependencies | unvetted-dep:@mintlify/openapi-parser | AI (dependencies): Same-org scoped package from Mintlify; expected internal dependency across all @mintlify/* packages. | ai | |
| dependencies | unvetted-dep:@mintlify/validation | AI (dependencies): Same-org scoped package from Mintlify; expected internal dependency across all @mintlify/* packages. | ai | |
| dependencies | unvetted-dep:@mintlify/scraping | AI (dependencies): Same-org scoped package from Mintlify; expected internal dependency across all @mintlify/* packages. | ai |
Versions (showing 51 of 1185)
| Version | Deps | Published |
|---|---|---|
| 1.0.1194 | 15 / 11 | |
| 1.0.1193 | 15 / 11 | |
| 1.0.1192 | 15 / 11 | |
| 1.0.1191 | 15 / 11 | |
| 1.0.1190 | 14 / 11 | |
| 1.0.1189 | 14 / 11 | |
| 1.0.1188 | 14 / 11 | |
| 1.0.1187 | 14 / 11 | |
| 1.0.1186 | 14 / 11 | |
| 1.0.1185 | 14 / 11 | |
| 1.0.1184 | 14 / 11 | |
| 1.0.1183 | 14 / 11 | |
| 1.0.1182 | 14 / 11 | |
| 1.0.1181 | 14 / 11 | |
| 1.0.1180 | 14 / 11 | |
| 1.0.1179 | 14 / 11 | |
| 1.0.1178 | 14 / 11 | |
| 1.0.1177 | 14 / 11 | |
| 1.0.1176 | 14 / 11 | |
| 1.0.1175 | 14 / 11 | |
| 1.0.1174 | 14 / 11 | |
| 1.0.1173 | 14 / 11 | |
| 1.0.1172 | 14 / 11 | |
| 1.0.1171 | 14 / 11 | |
| 1.0.1170 | 14 / 11 | |
| 1.0.1169 | 14 / 11 | |
| 1.0.1168 | 14 / 11 | |
| 1.0.1167 | 14 / 11 | |
| 1.0.1166 | 14 / 11 | |
| 1.0.1165 | 14 / 11 | |
| 1.0.1164 | 14 / 11 | |
| 1.0.1163 | 14 / 11 | |
| 1.0.1162 | 14 / 11 | |
| 1.0.1161 | 14 / 11 | |
| 1.0.1160 | 14 / 11 | |
| 1.0.1159 | 14 / 11 | |
| 1.0.1158 | 14 / 11 | |
| 1.0.1157 | 14 / 11 | |
| 1.0.1156 | 14 / 11 | |
| 1.0.1155 | 14 / 11 | |
| 1.0.1154 | 14 / 11 | |
| 1.0.1153 | 14 / 11 | |
| 1.0.1152 | 14 / 11 | |
| 1.0.1151 | 14 / 11 | |
| 1.0.1150 | 14 / 11 | |
| 1.0.1149 | 14 / 11 | |
| 1.0.1147 | 14 / 11 | |
| 1.0.1146 | 14 / 11 | |
| 1.0.1145 | 14 / 11 | |
| 1.0.1144 | 14 / 11 | |
| 1.0.1143 | 14 / 11 |
v1.0.1194
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1193
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1192
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1191
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1190
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1189
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1188
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1187
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1186
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1185
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1184
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1183
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1182
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1181
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1180
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1179
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1178
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1177
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1176
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1175
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1174
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1173
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1172
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1171
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1170
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1169
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1168
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1167
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1166
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1165
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1164
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1163
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1162
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1161
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1160
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1159
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1158
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1157
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1156
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1155
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1154
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1153
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1152
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1151
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1150
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1149
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1147
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1146
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1145
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1144
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1143
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.