@vitus-labs/tools-nextjs-images
Image optimization loaders for [Next.js](https://nextjs.org) with webpack.
19
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
vitbokisch
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:new-function-constructor | AI (semgrep): Used only to wrap a static dynamic import call to avoid webpack cache warnings; input is a hardcoded string, not user-controlled. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Resolves a fixed subpath ('sharp') under a detected loader directory; not arbitrary module loading. | ai | |
| phantom-deps | phantom-dep:img-loader | AI (phantom-deps): Webpack loader deps are referenced in config helpers, not directly imported — expected pattern for this package. | ai | |
| phantom-deps | phantom-dep:raw-loader | AI (phantom-deps): Same as img-loader: config-helper reference pattern, not a phantom dep concern. | ai | |
| phantom-deps | phantom-dep:url-loader | AI (phantom-deps): Same as img-loader: config-helper reference pattern, not a phantom dep concern. | ai | |
| phantom-deps | phantom-dep:file-loader | AI (phantom-deps): Same as img-loader: config-helper reference pattern, not a phantom dep concern. | ai |