@uni_toolkit/webpack-plugin-component-config
一个用于 UniApp 项目的 Webpack 插件，用于处理 Vue 文件中的 `<component-config>` 标签，将配置提取并合并到对应的 `小程序 JSON 文件` 中。
12
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
binbinji
Keywords
uni-appvue2miniprogramwebpackplugincomponentcustom
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@dcloudio/uni-cli-shared | AI (dependencies): Official DCloud uni-app CLI shared lib; alpha version pinning is normal for uni-app ecosystem tooling. | ai | |
| phantom-deps | phantom-dep:lodash-es | AI (phantom-deps): lodash-es is explicitly declared in dependencies; phantom-dep is a false positive for this package. | ai | |
| provenance | no-provenance | AI (provenance): Absence of provenance is common (~88% of npm packages); no other risk signals present. | ai | |
| phantom-deps | phantom-dep:rattail | AI (phantom-deps): rattail is declared as a runtime dependency in package.json; phantom-dep heuristic fires because it's not directly imported in source code. | ai |