@umijs/plugins MIT 25 versions

@umijs/plugins

npm Repository Homepage

@umijs/plugins

25

Versions

MIT

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sorryccchenshuai2144kuitospeachscriptxiaohuoniyifankakaxixierenyuanxusd320zoomdong07

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
publish-pattern	dormant-publish	AI (publish-pattern): Established UmiJS monorepo package; no material changes from prior version; publisher has approved track record.	ai	2026/05/15
dependencies	unvetted-dep:dva-immer	AI (dependencies): Known UmiJS ecosystem dependency; stable across versions of this package.	ai	2026/04/30
dependencies	unvetted-dep:dva-core	AI (dependencies): Known UmiJS ecosystem dependency; stable across versions of this package.	ai	2026/04/30
dependencies	unvetted-dep:dva-loading	AI (dependencies): Known UmiJS ecosystem dependency; stable across versions of this package.	ai	2026/04/30
dependencies	unvetted-dep:@umijs/valtio	AI (dependencies): First-party @umijs scoped package; stable for this package.	ai	2026/04/30
dependencies	unvetted-dep:@umijs/bundler-utils	AI (dependencies): First-party @umijs scoped package; stable for this package.	ai	2026/04/30
dependencies	unvetted-dep:antd-dayjs-webpack-plugin	AI (dependencies): Known Ant Design ecosystem plugin; stable for this package.	ai	2026/04/30
dependencies	unvetted-dep:@ant-design/antd-theme-variable	AI (dependencies): Known Ant Design scoped package; stable for this package.	ai	2026/04/30
dependencies	unvetted-dep:@ant-design/moment-webpack-plugin	AI (dependencies): Known Ant Design scoped package; stable for this package.	ai	2026/04/30
phantom-deps	phantom-dep:@tanstack/react-query	AI (phantom-deps): Plugin package; referenced in generated config/templates, not directly imported.	ai	2026/04/29
phantom-deps	phantom-dep:@tanstack/react-query-devtools	AI (phantom-deps): Plugin package; referenced in generated config/templates, not directly imported.	ai	2026/04/29
phantom-deps	phantom-dep:styled-components	AI (phantom-deps): Plugin package; referenced in generated config/templates, not directly imported.	ai	2026/04/29
phantom-deps	phantom-dep:moment	AI (phantom-deps): Plugin package; referenced in generated config/templates, not directly imported.	ai	2026/04/29
phantom-deps	phantom-dep:tslib	AI (phantom-deps): Known implicit runtime dependency for TypeScript compiled output.	ai	2026/04/29
phantom-deps	phantom-dep:@ant-design/pro-components	AI (phantom-deps): Plugin package; dependency is injected into user projects, not directly imported.	ai	2026/04/29
bogus-package	bogus-package	AI (bogus-package): Monorepo package; sparse metadata is consistent across all @umijs/* packages.	ai	2026/04/29

Versions (showing 25 of 225)

Version	Deps	Published
4.0.24	22 / 1	2022-09-29
4.0.23	22 / 1	2022-09-29
4.0.22	21 / 1	2022-09-22
4.0.21	21 / 1	2022-09-15
4.0.20	21 / 1	2022-09-13
4.0.19	21 / 1	2022-09-08
4.0.18	21 / 1	2022-09-07
4.0.17	21 / 1	2022-09-01
4.0.16	21 / 1	2022-09-01
4.0.15	21 / 1	2022-08-26
4.0.14	21 / 1	2022-08-25
4.0.13	20 / 1	2022-08-18
4.0.12	20 / 1	2022-08-11
4.0.11	20 / 1	2022-08-04
4.0.10	20 / 1	2022-08-04
4.0.9	20 / 1	2022-07-28
4.0.8	20 / 1	2022-07-21
4.0.7	20 / 1	2022-07-14
4.0.6	20 / 1	2022-07-07
4.0.5	20 / 1	2022-07-01
4.0.4	20 / 1	2022-07-01
4.0.3	20 / 1	2022-06-30
4.0.2	20 / 1	2022-06-24
4.0.1	20 / 1	2022-06-23
4.0.0	20 / 1	2022-06-21

v4.0.24

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.23

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.22

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.21

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.19

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.18

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.17

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.16

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.15

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.14

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.