@nx/webpack
The Nx Plugin for Webpack contains executors and generators that support building applications using Webpack.
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
nrwlownernrwl-jasonjack-nrwlmaxk-nrwljameshenry
Keywords
MonorepoWebpackWebCLIFront-end
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:dynamic-require | AI (semgrep): Loads user-supplied proxy config path; standard webpack dev-server pattern for this package. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): Used in build coordination plugin for running nx tasks; expected for a build orchestration tool. | ai | |
| semgrep | semgrep:env-bulk-read | AI (semgrep): Filters only NX_PUBLIC_ prefixed env vars for DefinePlugin injection; standard CRA/Nx pattern. | ai | |
| phantom-deps | phantom-dep:ajv | AI (phantom-deps): Webpack ecosystem peer/optional dep referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:less | AI (phantom-deps): Optional CSS preprocessor loaded by convention via webpack loaders; stable false positive. | ai | |
| phantom-deps | phantom-dep:sass | AI (phantom-deps): Optional CSS preprocessor loaded by convention via webpack loaders; stable false positive. | ai | |
| phantom-deps | phantom-dep:ts-loader | AI (phantom-deps): Webpack loader referenced in config files; loaded by webpack at runtime, not directly imported. | ai | |
| phantom-deps | phantom-dep:@babel/core | AI (phantom-deps): Framework-scoped dep loaded by babel-loader convention; stable false positive for this package. | ai |
Versions (showing 51 of 56)
| Version | Deps | Published |
|---|---|---|
| 23.1.0 | 34 / 1 | |
| 23.0.2 | 34 / 1 | |
| 23.0.1 | 34 / 1 | |
| 23.0.0 | 34 / 1 | |
| 22.7.7 | 36 / 1 | |
| 22.7.6 | 36 / 1 | |
| 22.7.5 | 36 / 1 | |
| 22.7.4 | 36 / 1 | |
| 22.7.3 | 36 / 1 | |
| 22.7.2 | 36 / 1 | |
| 22.7.1 | 36 / 1 | |
| 22.7.0 | 36 / 1 | |
| 22.6.5 | 36 / 1 | |
| 22.6.4 | 36 / 1 | |
| 22.6.3 | 36 / 1 | |
| 22.6.2 | 36 / 1 | |
| 22.6.1 | 36 / 1 | |
| 22.6.0 | 36 / 1 | |
| 22.5.4 | 36 / 1 | |
| 22.5.3 | 36 / 1 | |
| 22.5.2 | 36 / 1 | |
| 22.5.1 | 36 / 1 | |
| 22.5.0 | 36 / 1 | |
| 22.4.5 | 36 / 1 | |
| 22.4.4 | 36 / 1 | |
| 22.4.3 | 36 / 1 | |
| 22.4.2 | 36 / 1 | |
| 22.4.1 | 36 / 1 | |
| 22.4.0 | 36 / 1 | |
| 22.3.3 | 36 / 1 | |
| 22.3.2 | 36 / 1 | |
| 22.3.1 | 36 / 1 | |
| 22.3.0 | 36 / 1 | |
| 22.2.7 | 36 / 1 | |
| 22.2.6 | 36 / 1 | |
| 22.2.5 | 36 / 1 | |
| 22.2.4 | 36 / 1 | |
| 22.2.3 | 36 / 1 | |
| 22.2.2 | 36 / 1 | |
| 22.2.1 | 36 / 1 | |
| 22.2.0 | 36 / 1 | |
| 22.1.3 | 36 / 1 | |
| 22.1.2 | 36 / 1 | |
| 22.1.1 | 36 / 1 | |
| 22.1.0 | 36 / 1 | |
| 22.0.4 | 36 / 1 | |
| 22.0.3 | 36 / 1 | |
| 22.0.2 | 36 / 1 | |
| 22.0.1 | 36 / 1 | |
| 22.0.0 | 36 / 1 | |
| 21.6.11 | 36 / 1 |
v23.1.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v23.0.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.7.7
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.