Bump dompurify from 3.3.3 to 3.4.1 in /info-panel

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,68 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: '*'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
+        # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v3
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+
+        # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        # queries: security-extended,security-and-quality
+
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v2
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+
+    #   If the Autobuild fails above, remove it and uncomment the following three lines. 
+    #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+
+    # - run: |
+    #   echo "Run, Build Application using script"
+    #   ./location_of_script_within_repo/buildscript.sh
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2

.github/workflows/issues-jira.yml

@@ -0,0 +1,31 @@
+name: Create Jira Ticket for Github Issue
+
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  issue-jira:
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Login to Jira
+        uses: atlassian/gajira-login@master
+        env:
+          JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
+          JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}
+          JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
+
+      - name: Create Jira Issue
+        id: create_jira
+        uses: atlassian/gajira-create@master
+        with:
+          project: ${{ secrets.JIRA_PROJECT }}
+          issuetype: ${{ secrets.JIRA_ISSUE_TYPE }}
+          summary: Github | Issue | ${{ github.event.repository.name }} | ${{ github.event.issue.title }}
+          description: |
+            *GitHub Issue:* ${{ github.event.issue.html_url }}
+
+            *Description:*
+            ${{ github.event.issue.body }}
+          fields: "${{ secrets.ISSUES_JIRA_FIELDS }}"

.github/workflows/policy-scan.yml

@@ -0,0 +1,46 @@
+name: Checks the security policy and configurations
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  security-policy:
+    if: github.event.repository.visibility == 'public'
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@master
+      - name: Checks for SECURITY.md policy file
+        run: |
+          if ! [[ -f "SECURITY.md" || -f ".github/SECURITY.md" ]]; then exit 1; fi
+  security-license:
+    if: github.event.repository.visibility == 'public'
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@master
+      - name: Checks for License file
+        run: |
+          expected_license_files=("LICENSE" "LICENSE.txt" "LICENSE.md" "License.txt")
+          license_file_found=false
+          current_year=$(date +"%Y")
+
+          for license_file in "${expected_license_files[@]}"; do
+              if  [ -f "$license_file" ]; then
+                 license_file_found=true
+                 # check the license file for the current year, if not exists, exit with error
+                  if  ! grep -q "$current_year" "$license_file"; then
+                      echo "License file $license_file does not contain the current year."
+                      exit 2
+                  fi
+                  break
+              fi        
+          done
+
+          if [ "$license_file_found" = false ]; then
+              echo "No license file found. Please add a license file to the repository."
+              exit 1
+          fi

.github/workflows/sca-scan.yml

@@ -0,0 +1,18 @@
+name: Source Composition Analysis Scan
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  security-sca:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --all-projects --fail-on=all
+          json: true
+        continue-on-error: true
+      - uses: contentstack/sca-policy@main

.gitignore

@@ -1,2 +1,24 @@
-**/**/node_modules/*
-**/**/.talismanrc
+### react ###
+.DS_*
+*.log
+logs
+**/*.backup.*
+**/*.back.*
+
+node_modules
+bower_components
+
+*.sublime*
+
+psd
+thumb
+sketch
+
+### npm audit reports ###
+npm_audit_consolidated_report.txt
+npm_audit_report*.txt
+npm_audit*.txt
+
+### scripts ###
+npm_audit_all.sh
+npm_audit*.sh

.talismanrc

@@ -0,0 +1,5 @@
+fileignoreconfig:
+- filename: .github/workflows/secrets-scan.yml
+  ignore_detectors:
+    - filecontent
+version: "1.0"

CODEOWNERS

@@ -0,0 +1,11 @@
+* @contentstack/marketplace-solutions-pr-reviewers
+
+.github/workflows/sca-scan.yml @contentstack/security-admin
+
+.github/workflows/codeql-anaylsis.yml @contentstack/security-admin
+
+**/.snyk @contentstack/security-admin
+
+.github/workflows/policy-scan.yml @contentstack/security-admin
+
+.github/workflows/issues-jira.yml @contentstack/security-admin

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Contentstack
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1,16 +1,19 @@
-***REMOVED***Contentstack Extensions
+# Contentstack Extensions
 
-Contentstack provides Extensions that let you extend its UI. It provides three types of extensions: Custom Fields, Custom Widgets, and Dashboard Widgets.
+Contentstack provides Extensions that let you extend its UI. It provides four types of extensions: Custom Fields, Custom Widgets, Dashboard Widgets and JSON RTE Plugin.
 
 The **Custom Fields** extension lets you create custom fields that you can use in your content types, such as a color picker, code editor, video selector, and more.
 
 The **Custom Widgets** extension lets you add widgets that help you analyze the content of an entry and recommend content ideas. Examples of custom widgets are SEO recommendations, sentiment analysis, and content translation in different languages.
 
 The **Dashboard Widgets extension** allows you to add widgets to the dashboard of your stack. Using this extension, you can create useful widgets such as recently published content, to-do list, personal notes, stack summary, and more.
 
-This is a repository of example extensions created using Contentstack’s [Extensions SDK](https://github.com/contentstack/ui-extensions-sdk).
+The **JSON Rich Text Editor Plugins** lets you add/create custom plugins to extend the functionality of your JSON Rich Text Editor as per your needs. You can use the prebuilt JSON RTE plugins by modifying the code to suit your requirement. Some of the basic prebuilt plugins include Highlight, Info Panel, and Word Count. 
 
-##***REMOVED***Examples of custom fields created using Extensions
+
+This is a repository of example extensions created using Contentstack’s [App SDK](https://www.npmjs.com/package/@contentstack/app-sdk) for JSON RTE Plugins and for others [Extensions SDK](https://github.com/contentstack/ui-extensions-sdk).
+
+### Examples of custom fields created using Extensions
 
 Here are some examples/use cases of custom fields that can be created using Extensions. These examples come with readme files that explain how to install and get started with these fields.
 
@@ -50,7 +53,7 @@ This extension lets you fetch and display Youtube videos into a field of your co
 [External API Lookup](./external-api-lookup-template):
 This extension lets you fetch data from an external API and display the data as possible values for the field on an entry page in Contentstack.
 
-##***REMOVED***Examples of custom widgets created using Extensions
+### Examples of custom widgets created using Extensions
 
 Here are some examples/use cases of custom widgets that can be created using Extensions. These examples come with readme files that explain how to install and get started with these widgets.
 
@@ -63,7 +66,10 @@ This widget uses the Google Analytics data to display the traffic analysis and s
 [Optimizely Experiments](./optimizely-experiments):
 This extension lets you retrieve and display Optimizely Experiments and their details in your entry.
 
-##***REMOVED***Examples of dashboard widgets created using Extensions
+[Developer Tools](./developer-tools):
+This widget extension provides developers with quick tools (API endpoint, JSON, etc.) to work with an entry or all entries of a content type and do a lot more.
+
+### Examples of dashboard widgets created using Extensions
 
 Here are some examples/use cases of dashboard widgets that can be created using Extensions. These examples come with readme files that explain how to install and get started with these widgets.
 
@@ -73,7 +79,22 @@ This dashboard widget uses the Google Analytics data to display the traffic anal
 [Content Type Visualizer](./content-type-visualizer):
 Content Type Visualizer Dashboard Widget offers a graphical representation of all content types, along with their fields, in a particular stack.
 
-##***REMOVED***Other Documentation
+### Examples of JSON RTE Plugin created using Extensions
+
+Here are some examples/use cases of JSON RTE Plugin that can be created using Extensions. These examples come with readme files that explain how to install and get started with these plugins.
+
+[Highlight](./highlight)
+Allows you to highlight certain parts of your content, such as a whole line of text or a paragraph.
+
+
+[Info Panel](./info-panel)
+Allows you to place important content inside a colored panel to make it stand out.
+
+
+[Word Count](./word-count)
+Allows you to track the word count for your JSON Rich Text Editor content.
+
+### Other Documentation
 
 - [What are Extensions](https://www.contentstack.com/docs/guide/extensions)
 - [Extensions SDK](https://github.com/contentstack/ui-extensions-sdk)

SECURITY.md

@@ -0,0 +1,27 @@
+## Security
+
+Contentstack takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations.
+
+If you believe you have found a security vulnerability in any Contentstack-owned repository, please report it to us as described below.
+
+## Reporting Security Issues
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Send email to [security@contentstack.com](mailto:security@contentstack.com).
+
+You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message.
+
+Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
+
+- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
+- Full paths of source file(s) related to the manifestation of the issue
+- The location of the affected source code (tag/branch/commit or direct URL)
+- Any special configuration required to reproduce the issue
+- Step-by-step instructions to reproduce the issue
+- Proof-of-concept or exploit code (if possible)
+- Impact of the issue, including how an attacker might exploit the issue
+
+This information will help us triage your report more quickly.
+
+[https://www.contentstack.com/trust/](https://www.contentstack.com/trust/)

ace-editor/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2021 Contentstack
+Copyright (c) 2026 Contentstack
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

ace-editor/README.md

@@ -1,15 +1,15 @@
-***REMOVED***Ace Editor – Contentstack Extension 
+# Ace Editor – Contentstack Extension 
 
-###***REMOVED***About this extension
+#### About this extension
 Ace Editor is an embeddable code editor that includes features of native code editors, such as Sublime and Vim. This extension lets you add the ACE editor as a field into content types of your stack. 
 
 ![Ace Editor Screenshot](https://images.contentstack.io/v3/assets/bltf2fb14dd3176c6f6/blt455662307ca96119/5b509101277066700b7c545f/download)
 
-###***REMOVED***How to use this extension
+#### How to use this extension
 Ace Editor is available as a prebuilt template that you can use instantly. Login to your Contentstack account, add it into your stack, and start using it. 
 
 Learn how to [add a prebuilt extension](http://www.contentstack.com/docs/guide/extensions/ace-editor-extension-setup-guide) to your stack.  
 
-###***REMOVED***Other Documentation
+#### Other Documentation
 - [Extensions guide](https://www.contentstack.com/docs/guide/extensions)
 - [Common questions about extensions](https://www.contentstack.com/docs/faqs#extensions)

brightcove/README.md

@@ -1,16 +1,16 @@
-***REMOVED***Brightcove – Contentstack Extension
+# Brightcove – Contentstack Extension
 
-#***REMOVED***About this extension
+## About this extension
 
 The Brightcove extension lets you fetch Brightcove videos and display them into a field in your content type. Subsequently, while creating entries, content managers can select only one of the listed videos at a time as the input value for that field, and the details of the video will be saved as JSON in Contentstack.
 
 ![contentstack Brightcove extension](/brightcove/brightcove/public/brightcove.png)
 
-#***REMOVED***How to use this extension
+## How to use this extension
 
 We have created a step-by-step guide on how to create a Brightcove extension for your content types. You can refer the [Brightcove extension guide](https://www.contentstack.com/docs/developers/create-custom-fields/brightcove/) on our documentation site for more info.
 
-#***REMOVED***Modifying this extension
+## Modifying this extension
 
 To modify the extension, first clone this repo and install the dependencies. Then, edit the Home.tsx or Popup.tsx, CSS files from the source/page folder, and create a build using gulp task.
 
@@ -22,7 +22,7 @@ To create new build for the extension, run the following command :
 
     npm run build
 
-#***REMOVED***Other Documentation
+## Other Documentation
 
 - [Extensions guide](https://www.contentstack.com/docs/guide/extensions)
 - [Common questions about extensions](https://www.contentstack.com/docs/faqs#extensions)