
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
strapi-v5-deep-populate
Advanced tools
This plugin is a fork of strapi-v5-plugin-populate-deep which is a fork of the original strapi-plugin-populate-deep, which does not support Strapi v5 at the time of this publication.
With Strapi v5, a new API structure validation feature was introduced, which makes the populate parameter incompatible with how the original plugin works. This plugin addresses that by introducing a new parameter pLevel to avoid validation issues.
npm install strapi-v5-deep-populate
yarn add strapi-v5-deep-populate
The plugin allows you to deeply populate data in your Strapi queries with a new parameter pLevel. This parameter specifies the depth of population for your API responses.
Populate a request with the default max depth.
/api/articles?pLevel
Populate a request with the a custom depth
/api/articles?pLevel=10
You can configure the default depth globally through the plugin configuration. Additionally, you can delete keys from the api response.
To customize the default depth, add or modify the config/plugins.js file as shown below:
config/plugins.js
module.exports = ({ env }) => ({
'strapi-v5-deep-populate': {
config: {
defaultDepth: 3, // default is 5
skipCreatorFields: true,
keysToDelete: [ // keys to delete from the response
"createdAt"
],
},
},
});
This configuration will set the default depth to 3 levels across all API requests unless specified otherwise in the request itself and will remove the createdAt key from the response.
This plugin is a fork of the contribution of NEDDL to the original plugin and can be found in the original repository which originally is a fork of the work by Barelydead and can be found in the original repository.
The original idea for getting the populate structure was created by tomnovotny7 and can be found in this github thread
We appreciate and acknowledge all contributions made by the open-source community to the original project.
FAQs
Strapi v5 plugin that populates nested content.
We found that strapi-v5-deep-populate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.