nuxt-schema-org
18
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
harlan_zw
Keywords
schema-orgnuxt@nuxt-schema-orgnuxt-modulenuxt3
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@unhead/schema-org-v2 | AI (phantom-deps): npm alias used for compat shim; referenced in config rather than directly imported — stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/B1DdtD2d.js | AI (source-diff): Standard Vite-bundled devtools UI output; minified Vue/Nuxt code, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/CCjZBs6a.js | AI (source-diff): Standard Vite-bundled devtools UI output; recognizable Vue core runtime patterns. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/CQr7N5ou.js | AI (source-diff): Standard Vite-bundled devtools UI output; contains destr/ufo URL utilities, not malicious. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/D-Oj-loM.js | AI (source-diff): Standard Vite-bundled devtools UI output; recognizable ofetch/h3 patterns. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/D6u4txBo.js | AI (source-diff): Standard Vite-bundled devtools UI output; contains schema.org type definitions, clearly legitimate. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/CdXDNp_G.js | AI (source-diff): Vite-minified devtools bundle; module preload and routing code. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/Cy_SgmVP.js | AI (source-diff): Vite-minified devtools bundle; schema validator UI component. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/25mM0RmU.js | AI (source-diff): Vite-minified devtools bundle; theme color JSON data, not obfuscated malware. | ai | |
| phantom-deps | phantom-dep:nuxtseo-layer-devtools | AI (phantom-deps): Listed as runtime dep in package.json; used as a Nuxt layer, not a direct JS import. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/Sez8u9en.js | AI (source-diff): Vite-minified devtools bundle; consistent with other devtools UI files. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/4gBpuNMp.js | AI (source-diff): Vite-minified devtools bundle; syntax grammar JSON data for JS language. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/BHnqSpjH.js | AI (source-diff): Vite-minified devtools bundle; standard URL encoding utilities and destr library. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/Bkjh01gQ.js | AI (source-diff): Vite-minified devtools bundle; schema-org devtools UI components. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/CAgYPU5B.js | AI (source-diff): Vite-minified devtools bundle; dark theme color JSON data. | ai | |
| source-diff | obfuscated-file:dist/devtools/_nuxt/CcVmIEJg.js | AI (source-diff): Vite-minified devtools bundle; standard Nuxt/Vue devtools UI code. | ai |
Versions (showing 18 of 18)
| Version | Deps | Published |
|---|---|---|
| 6.2.7 | 6 / 25 | |
| 6.2.6 | 6 / 24 | |
| 6.2.5 | 6 / 24 | |
| 6.2.4 | 6 / 24 | |
| 6.2.3 | 6 / 24 | |
| 6.2.2 | 6 / 24 | |
| 6.2.1 | 7 / 23 | |
| 6.2.0 | 6 / 24 | |
| 6.1.3 | 8 / 22 | |
| 6.1.2 | 8 / 22 | |
| 6.1.1 | 8 / 22 | |
| 6.1.0 | 6 / 23 | |
| 6.0.4 | 7 / 20 | |
| 6.0.3 | 7 / 20 | |
| 6.0.2 | 7 / 20 | |
| 6.0.1 | 7 / 20 | |
| 6.0.0 | 7 / 20 | |
| 5.0.10 | 7 / 16 |
v6.2.7
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.2.6
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.2.5
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.2.4
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.