
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
payload-plugin-nested-pages
Advanced tools
A plugin for Payload CMS to easily allow for documents to be nested inside one another.
Core features:
yarn add payload-plugin-nested-pages
# OR
npm i payload-plugin-nested-pages
In the plugins array of your Payload config, call the plugin with options:
import { buildConfig } from 'payload/config';
import nestedPages from 'payload-plugin-nestedPages';
const config = buildConfig({
collections: [
{
slug: 'pages',
fields: [
{
name: 'title',
type: 'text'
},
{
name: 'slug',
type: 'text'
}
]
}
],
plugins: [
nestedPages({
collections: ['pages'],
generateLabel: (_, doc) => doc.title,
generateURL: (docs) => docs.reduce((url, doc) => `${url}/${doc.slug}`, ''),
})
]
});
export default config;
The parent relationship field is automatically added to every document which allows editors to choose another document from the same collection to act as the direct parent.
The breadcrumbs field is an array which dynamically populates all parent relationships of a document up to the top level. It does not store any data in the database, and instead, acts as a virtual field which is dynamically populated each time the document is loaded.
The breadcrumbs array stores the following fields:
label
The label of the breadcrumb. This field is automatically set to either the collection.admin.useAsTitle (if defined) or is set to the ID of the document. You can also dynamically define the label by passing a function to the options property of generateLabel.
url
The URL of the breadcrumb. By default, this field is undefined. You can manually define this field by passing a property called function to the plugin options property of generateURL.
collectionsAn array of collections slugs to enable nested pages.
generateLabelEach breadcrumb has a required label field. By default, its value will be set to the collection's admin.useAsTitle or fallback the the ID of the document.
You can also pass a function to dynamically set the label of your breadcrumb.
{
plugins: [
...
nestedPages({
...
generateLabel: (_, doc) => doc.title // NOTE: 'title' is a hypothetical field
})
]
The function takes two arguments and returns a string:
breadcrumbs - an array of the breadcrumbs up to that pointcurrentDoc - the current document being editedgenerateURLA function that allows you to dynamically generate each breadcrumb url. Each breadcrumb has an optional url field which is undefined by default. For example, you might want to format a full URL to contain all of the breadcrumbs up to that point, like /about-us/company/our-team.
plugins: [
...
nestedPages({
...
generateURL: (docs) => docs.reduce((url, doc) => `${url}/${doc.slug}`, ''), // NOTE: 'slug' is a hypothetical field
})
]
This function takes two arguments and returns a string:
breadcrumbs - an array of the breadcrumbs up to that pointcurrentDoc - the current document being editedparentFieldSlugWhen defined, the parent field will not be provided for you automatically, and instead, expects you to add your own parent field to each collection manually. This gives you complete control over where you put the field in your admin dashboard, etc. Set this property to the name of your custom field.
breadcrumbsFieldSlugWhen defined, the breadcrumbs field will not be provided for you, and instead, expects your to add your own breadcrumbs field to each collection manually. Set this property to the name of your custom field.
Note - if you opt out of automatically being provided a
parentorbreadcrumbsfield, you need to make sure that both fields are placed at the top-level of your document. They cannot exist within any nested data structures like agroup,array, orblocks.
You can also extend the built-in parent and breadcrumbs fields on a page-by-page basis by importing helper methods as follows:
import { CollectionConfig } from 'payload/types';
import createParentField from 'payload-plugin-nested-pages/fields/parent';
import createBreadcrumbsField from 'payload-plugin-nested-pages/fields/breadcrumbs';
const examplePageConfig: CollectionConfig = {
slug: 'pages',
fields: [
createParentField(
// First argument is equal to the slug of the collection
// that the field references
'pages',
// Second argument is equal to field overrides that you specify,
// which will be merged into the base parent field config
{
admin: {
position: 'sidebar',
},
},
),
createBreadcrumbsField(
// First argument is equal to the slug of the collection
// that the field references
'pages',
// Argument equal to field overrides that you specify,
// which will be merged into the base `breadcrumbs` field config
{
label: 'Page Breadcrumbs',
}
)
]
}
All types can be directly imported:
import {
NestedPagesConfig,
GenerateURL,
GenerateLabel
} from 'payload-plugin-nested-pages/dist/types';
FAQs
Nested pages plugin for Payload CMS
The npm package payload-plugin-nested-pages receives a total of 4 weekly downloads. As such, payload-plugin-nested-pages popularity was classified as not popular.
We found that payload-plugin-nested-pages demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.