@zeropress/theme
ZeroPress theme developer toolkit
10
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
laelbe
Keywords
zeropressstatic-site-generatorssgbuildthemetheme-developmentdeveloper-toolkittheme-toolkit
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:silent-process-exec | AI (semgrep): Cross-platform browser-open helper (open/cmd start); standard dev-server pattern, not malicious. | ai | |
| semgrep | semgrep:silent-process-exec-var | AI (semgrep): Same browser-open code path; stable false positive for this dev-toolkit package. | ai |