@posthog/nextjs-config
NextJS configuration helper for Posthog 🦔
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
watilotwixesfuziontechmariusandraben-posthogtimglrafael_posthogfraserhoppermanoelposthogrobbie-cdustinbyrnefeliperalmeidalucasheriquesfrankposthogtom-posthogadamleithpcat-phsarahxsanderspeterkirkhamposthogioannisjjoshuasnyderhuguespouillot
Keywords
posthognextjs
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers are within PostHog org (frankposthog, tom-posthog); normal team changes. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): david-posthog removed; normal PostHog team turnover. | ai | |
| semgrep | semgrep:child-process-spawn | AI (semgrep): Spawns declared dep posthog-cli; stable pattern for this package. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): CLI wrapper package; spawning posthog-cli is its core purpose. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Passes process.env to spawned posthog-cli child process; standard subprocess pattern. | ai | |
| provenance | publisher-changed | AI (provenance): Legitimate migration from personal npm account to GitHub Actions CI/CD publishing with SLSA provenance. | ai | |
| phantom-deps | phantom-dep:@posthog/cli | AI (phantom-deps): @posthog/cli is a same-org tooling dep; phantom-dep false positive stable for this package. | ai |
Versions (showing 51 of 134)
| Version | Deps | Published |
|---|---|---|
| 1.9.68 | 4 / 9 | |
| 1.9.67 | 4 / 9 | |
| 1.9.66 | 4 / 9 | |
| 1.9.65 | 4 / 9 | |
| 1.9.64 | 4 / 9 | |
| 1.9.63 | 4 / 9 | |
| 1.9.62 | 4 / 9 | |
| 1.9.61 | 4 / 9 | |
| 1.9.60 | 4 / 9 | |
| 1.9.59 | 4 / 9 | |
| 1.9.58 | 4 / 9 | |
| 1.9.57 | 4 / 9 | |
| 1.9.56 | 4 / 9 | |
| 1.9.55 | 4 / 9 | |
| 1.9.54 | 4 / 9 | |
| 1.9.53 | 4 / 9 | |
| 1.9.52 | 4 / 9 | |
| 1.9.51 | 4 / 9 | |
| 1.9.50 | 4 / 9 | |
| 1.9.49 | 4 / 9 | |
| 1.9.48 | 4 / 9 | |
| 1.9.47 | 4 / 9 | |
| 1.9.46 | 4 / 9 | |
| 1.9.45 | 4 / 9 | |
| 1.9.44 | 4 / 9 | |
| 1.9.43 | 4 / 9 | |
| 1.9.42 | 4 / 9 | |
| 1.9.41 | 4 / 9 | |
| 1.9.40 | 4 / 9 | |
| 1.9.39 | 4 / 9 | |
| 1.9.38 | 4 / 9 | |
| 1.9.37 | 4 / 9 | |
| 1.9.36 | 4 / 9 | |
| 1.9.35 | 4 / 9 | |
| 1.9.34 | 4 / 9 | |
| 1.9.33 | 4 / 9 | |
| 1.9.32 | 4 / 9 | |
| 1.9.31 | 4 / 9 | |
| 1.9.30 | 4 / 9 | |
| 1.9.29 | 4 / 9 | |
| 1.9.28 | 4 / 9 | |
| 1.9.27 | 4 / 9 | |
| 1.9.26 | 4 / 9 | |
| 1.9.25 | 4 / 9 | |
| 1.9.24 | 4 / 9 | |
| 1.9.23 | 4 / 9 | |
| 1.9.22 | 4 / 9 | |
| 1.9.21 | 4 / 9 | |
| 1.9.20 | 4 / 9 | |
| 1.9.19 | 4 / 9 | |
| 1.9.18 | 4 / 9 |
v1.9.68
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.