Skip to content

slackhq/csp-html-webpack-plugin

View on GitHub ↗Related repositories →

A plugin which, when combined with HTMLWebpackPlugin, adds CSP tags to the HTML output.

active 2023-08-162025-12-23 (UTC)

Complete coverage26,790 / 26,790 hourly files (100%) · 2 absent upstream2023-08-152026-09-04 (UTC)
Events
43
Pushes
0
Pull requests
1
Issues
9
Stars
17
Forks
4

Activity over time

Daily event counts in the loaded window

Line chart, 861 days from 2023-08-16 to 2025-12-23. Pushes: 0 total, peak 0 in a day. Pull requests: 1 total, peak 1 in a day. Issues: 9 total, peak 2 in a day. Comments: 11 total, peak 2 in a day. Stars: 17 total, peak 2 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
warnyul3002
ttencate3001
LoganKells3001
mwbrooks2011
icaldana2000
MarshallOfSound2002
nzaytsev1001
eamodio1000
ecc5211001
madhukivera1001
quadristan1000
SteffenBlake1001

Recent activity

Latest issues, pull requests and releases

  • Issue comment#128mwbrooks2025-11-18 21:36
    chore: Add .github/CODEOWNERS file
  • Pull request#128mwbrooks2025-11-14 21:08
  • Issue#127icaldana2025-05-05 11:17
    Support for Multiple script-src Policies in CSP
  • Issue#127icaldana2025-03-21 18:28
    Support for Multiple script-src Policies in CSP
  • Issue comment#126ecc5212025-03-09 23:40
    Incorrect hashes generated causing CSP violations
  • Issue comment#126MarshallOfSound2024-12-28 21:57
    Incorrect hashes generated causing CSP violations
  • Issue comment#123MarshallOfSound2024-12-28 21:57
    Doctype is mutilated
  • Issue comment#126warnyul2024-12-03 09:23
    Incorrect hashes generated causing CSP violations
  • Issue comment#126warnyul2024-12-01 04:08
    Incorrect hashes generated causing CSP violations
  • Issue#126warnyul2024-11-29 13:05
    Incorrect hashes henerated by CspHtmlWebpackPlugin causing CSP violations
  • Issue comment#125nzaytsev2024-10-18 05:45
    Double encodes html entities (`&`, ` `, etc)
  • Issue#125eamodio2024-10-16 19:11
    Double encodes html entities (`&`, ` `, etc)
  • Issue comment#123ttencate2024-09-03 10:06
    Doctype is mutilated
  • Issue#124ttencate2024-09-03 09:29
    Is this plugin still maintained?
  • Issue#123ttencate2024-09-03 09:22
    Doctype is mutilated
  • Issue comment#121LoganKells2024-08-26 07:39
    Nonce seems to be static - recommanded conf is dangerous for static website generators
  • Issue#122LoganKells2024-08-26 07:35
    removed
  • Issue#122LoganKells2024-08-06 22:56
    Error fallback to default-src despite style-src having hashes configured
  • Issue#121quadristan2024-03-22 14:29
    Nonce seems to be static - recommanded conf is dangerous for static website generators
  • Issue comment#57madhukivera2024-02-01 05:12
    Documentation may be misleading and hashEnabled option does not work
  • Issue comment#50SteffenBlake2023-10-24 00:33
    Add hashes to external scripts (CSP3)

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 17 stars here means stars gained during the window, not the repo's star count.