mini-css-extract-plugin
extracts CSS into separate files
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
evilebottnawisokrajhnns
Keywords
webpackcssextracthmr
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): mini-css-extract-plugin is a legitimate webpack-contrib package; signals (mass-production, no keywords, small entry point) are all false positives for this well-established plugin. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance; absence is expected for all historical versions of this package. | ai | |
| source-diff | obfuscated-file:dist/CssLoadingRuntimeModule.js | AI (source-diff): dist/ files are Babel-transpiled output from the build step; long lines are webpack runtime template strings, not obfuscation. This is expected for webpack plugin packages in the webpack-contrib org. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): tapable is the official webpack hook library from the same org; its addition as a direct dep is expected and benign for a webpack plugin. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Package is under the webpack GitHub org; early contributors leaving is a normal org consolidation, not a takeover signal. | ai | |
| dependencies | unvetted-dep:tapable | AI (dependencies): tapable is a core webpack team utility and a standard dependency for all webpack plugins; no risk for this package. | ai |
Versions (showing 51 of 84)
| Version | Deps | Published |
|---|---|---|
| 2.10.2 | 2 / 32 | |
| 2.10.1 | 2 / 32 | |
| 2.10.0 | 2 / 44 | |
| 2.9.4 | 2 / 44 | |
| 2.9.3 | 2 / 35 | |
| 2.9.2 | 2 / 35 | |
| 2.9.1 | 2 / 35 | |
| 2.9.0 | 2 / 35 | |
| 2.8.1 | 2 / 35 | |
| 2.8.0 | 2 / 35 | |
| 2.7.7 | 1 / 35 | |
| 2.7.6 | 1 / 35 | |
| 2.7.5 | 1 / 35 | |
| 2.7.4 | 1 / 35 | |
| 2.7.3 | 1 / 35 | |
| 2.7.2 | 1 / 34 | |
| 2.7.1 | 1 / 34 | |
| 2.7.0 | 1 / 33 | |
| 2.6.1 | 1 / 33 | |
| 2.6.0 | 1 / 32 | |
| 2.5.3 | 1 / 32 | |
| 2.5.2 | 1 / 32 | |
| 2.5.1 | 1 / 32 | |
| 2.5.0 | 1 / 32 | |
| 2.4.7 | 1 / 31 | |
| 2.4.6 | 1 / 31 | |
| 2.4.5 | 1 / 31 | |
| 2.4.4 | 1 / 31 | |
| 2.4.3 | 1 / 31 | |
| 2.4.2 | 1 / 31 | |
| 2.4.1 | 1 / 31 | |
| 2.4.0 | 1 / 31 | |
| 2.3.0 | 1 / 31 | |
| 2.2.2 | 1 / 29 | |
| 2.2.1 | 1 / 29 | |
| 2.2.0 | 1 / 29 | |
| 2.1.0 | 1 / 29 | |
| 2.0.0 | 1 / 29 | |
| 1.6.2 | 3 / 29 | |
| 1.6.1 | 3 / 29 | |
| 1.6.0 | 3 / 29 | |
| 1.5.1 | 3 / 29 | |
| 1.5.0 | 3 / 29 | |
| 1.4.1 | 3 / 29 | |
| 1.4.0 | 3 / 29 | |
| 1.3.9 | 3 / 29 | |
| 1.3.8 | 3 / 30 | |
| 1.3.7 | 3 / 30 | |
| 1.3.6 | 3 / 30 | |
| 1.3.5 | 3 / 30 | |
| 1.3.4 | 3 / 30 |