← Home

gatsby-plugin-page-creator

Gatsby plugin that automatically creates pages from React components in specified directories

100
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

piehkathmbeckserhalp-netlifymlgualtieri-gatsbyfktylerbarnesdaniellewgatsby

Keywords

gatsbygatsby-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff source-size-dropped AI (source-diff): Source size drop reflects Babel transpilation output (src/ → index.js); expected for compiled plugins. ai
phantom-deps phantom-dep:fs-exists-cached AI (phantom-deps): Utility dependency used by Gatsby plugins; indirect import pattern is stable for this package. ai
phantom-deps phantom-dep:gatsby-telemetry AI (phantom-deps): Gatsby ecosystem dependency; indirect import via Gatsby framework is expected for plugins. ai
phantom-deps phantom-dep:gatsby-core-utils AI (phantom-deps): Gatsby ecosystem dependency; indirect import via Gatsby framework is expected for plugins. ai
phantom-deps phantom-dep:gatsby-page-utils AI (phantom-deps): Gatsby ecosystem dependency; indirect import via Gatsby framework is expected for plugins. ai
phantom-deps phantom-dep:gatsby-plugin-utils AI (phantom-deps): Gatsby ecosystem dependency; indirect import via Gatsby framework is expected for plugins. ai
phantom-deps phantom-dep:@sindresorhus/slugify AI (phantom-deps): Legitimate utility dependency for slug generation; indirect import pattern is normal for plugins. ai
phantom-deps phantom-dep:globby AI (phantom-deps): Globby is legitimately used by this Gatsby plugin for file globbing; indirect import pattern is normal for plugins. ai
phantom-deps phantom-dep:lodash AI (phantom-deps): Lodash is a legitimate utility dependency used by Gatsby plugins; indirect import pattern is expected. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): Chokidar is used for file watching in this page-creator plugin; indirect import is normal for this use case. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Framework-scoped Babel package loaded by convention; expected for Babel-compiled plugins. ai
provenance publisher-changed AI (provenance): Gatsby maintenance transitioned to Netlify staff; pieh → serhalp-netlify is a known organizational change. ai
maintainer-change maintainer-added AI (maintainer-change): New maintainers are Netlify-affiliated staff taking over Gatsby maintenance. ai
maintainer-change maintainer-removed AI (maintainer-change): Old Gatsby maintainers removed as part of known org transition to Netlify. ai
bogus-package bogus-package AI (bogus-package): Templated names are expected for gatsby-* monorepo packages; empty index.js is standard Gatsby plugin convention. ai
dependencies unvetted-dep:fs-exists-cached AI (dependencies): fs-exists-cached is a long-standing stable utility used throughout the Gatsby ecosystem; no malicious behavior associated with it. ai
phantom-deps phantom-dep:@babel/traverse AI (phantom-deps): @babel/traverse is explicitly listed as a direct dependency in package.json; the phantom-dep finding reflects framework-convention loading, not a missing or suspicious dependency. ai

Versions (showing 100 of 200)

Hide prereleases
Version Deps Published
2.3.31 8 / 4
2.3.30 8 / 4
2.3.29 8 / 4
2.3.28 8 / 4
2.3.27 8 / 4
2.3.26 7 / 4
2.3.25 7 / 4
2.3.24 7 / 4
2.3.23 7 / 4
2.3.22 7 / 4
2.3.21 7 / 4
2.3.20 7 / 4
2.3.19 7 / 4
2.3.18 7 / 4
2.3.17 7 / 4
2.3.16 7 / 4
2.3.15 7 / 4
2.3.14 7 / 4
2.3.12 7 / 4
2.3.11 7 / 4
2.3.10 7 / 4
2.3.9 7 / 4
2.3.8 7 / 4
2.3.7 7 / 4
2.3.6 7 / 4
2.3.5 7 / 4
2.3.4 7 / 4
2.3.3 7 / 4
2.3.2 7 / 4
2.3.1 7 / 4
2.3.0 7 / 4
2.2.4 7 / 4
2.2.3 7 / 4
2.2.2 7 / 4
2.2.1 7 / 4
2.2.0 7 / 4
2.1.46 7 / 4
2.1.45 7 / 4
2.1.44 7 / 4
2.1.43 7 / 4
2.1.42 7 / 4
2.1.41 7 / 4
2.1.40 7 / 4
2.1.39 7 / 4
2.1.38 7 / 4
2.1.37 7 / 4
2.1.36 7 / 4
2.1.34 7 / 4
2.1.33 7 / 4
2.1.32 7 / 4
2.1.31 7 / 4
2.1.30 7 / 4
2.1.29 7 / 4
2.1.28 7 / 4
2.1.27 7 / 4
2.1.26 7 / 4
2.1.25 7 / 4
2.1.24 7 / 4
2.1.23 7 / 4
2.1.21 7 / 4
2.1.20 7 / 4
2.1.19 7 / 4
2.1.18 7 / 4
2.1.17 7 / 4
2.1.16 7 / 4
2.1.15 7 / 4
2.1.14 7 / 4
2.1.13 7 / 4
2.1.12 7 / 4
2.1.11 7 / 4
2.1.10 7 / 4
2.1.9 7 / 4
2.1.8 7 / 4
2.1.7 7 / 4
2.1.6 7 / 4
2.1.5 7 / 4
2.1.4 7 / 4
2.1.3 7 / 4
2.1.2 7 / 4
2.1.1 7 / 4
2.1.0 8 / 4
2.0.13 8 / 4
2.0.12 9 / 4
2.0.11 9 / 4
2.0.10 9 / 4
2.0.9 9 / 4
2.0.8 9 / 4
2.0.7 9 / 4
2.0.6 9 / 4
2.0.5 9 / 4
2.0.4 9 / 4
2.0.3 9 / 4
2.0.2 8 / 4
2.0.1 8 / 3
2.0.0 8 / 3
1.0.1 7 / 2
5.17.0-react19.1 11 / 4
5.17.0-react19.0 11 / 4
5.17.0-next.0 11 / 4
5.16.0-next.0 11 / 4