@plone/mockup
A collection of client side patterns for faster and easier web development
7
Versions
BSD-3-Clause
License
Yes
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
agitatortimostollenwerkramonnbebrehaultrobgietemasneridaghmauritsvanreesericofthetpetschkimrtangodavisaglipieronicolli
Keywords
mockuppatternslibplone
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:slides | AI (phantom-deps): Used in webpack config for bundling, not directly imported in JS source. | ai | |
| npm-metadata | url-dep:slides | AI (npm-metadata): Points to Patternslib org repo, same ecosystem as this package; not a suspicious third-party URL. | ai | |
| npm-metadata | url-dep:slick-carousel | AI (npm-metadata): SHA-pinned to a specific upstream commit for reproducibility; consistent with Plone/Patternslib ecosystem practice. | ai | |
| phantom-deps | phantom-dep:slick-carousel | AI (phantom-deps): Used in webpack config for bundling, not directly imported in JS source. | ai | |
| dependencies | unvetted-dep:select2 | AI (dependencies): Git-pinned select2 at a specific tag; stable known dependency for this package. | ai | |
| dependencies | unvetted-dep:dropzone | AI (dependencies): dropzone 5.9.3 is a well-known file upload library; stable dependency for this package. | ai | |
| phantom-deps | phantom-dep:@11ty/eleventy-upgrade-help | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tinymce-i18n | AI (phantom-deps): Referenced in config files as documented; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:jquery.browser | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:bootstrap-icons | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:cs-jqtree-contextmenu | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| source-diff | net-exec-file:dist/chunks/32041.18093f6262e2f58cd66d.min.js | AI (source-diff): Webpack chunk for pat-code-editor; dynamic imports are lazy-load patterns for highlight.js languages, not dropper behavior. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Applies a local patch file to select2; no network fetch, no arbitrary code execution — stable pattern for this package. | ai | |
| npm-metadata | url-dep:select2 | AI (npm-metadata): Pinned to a specific commit hash on the official ivaynberg/select2 repo; documented in package.json comments as intentional pnpm workaround. | ai |