@atlaskit/editor-plugin-date
Date plugin for @atlaskit/editor-core
18
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
atlassianartifactteam
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Lack of Sigstore provenance is common industry practice; not a disqualifier for established, trusted publishers. | ai | |
| phantom-deps | phantom-dep:@atlaskit/date | AI (phantom-deps): Same-org Atlaskit dependency declared but not directly imported; consistent with Atlaskit monorepo conventions across versions. | ai | |
| dependencies | unvetted-dep:@atlaskit/date | AI (dependencies): First-party Atlassian dependency within the same @atlaskit org scope; no meaningful supply chain risk for this package. | ai | |
| dependencies | unvetted-dep:react-intl-next | AI (dependencies): react-intl-next is a standard Atlassian npm alias for react-intl@^5.18.1, used consistently across the @atlaskit ecosystem. Not a security concern. | ai | |
| phantom-deps | phantom-dep:@atlaskit/css | AI (phantom-deps): Atlassian uses Compiled CSS toolchain; @atlaskit/css may be consumed at build/style level without direct JS imports. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:bind-event-listener | AI (phantom-deps): Referenced in config files per the finding; Atlassian's techstack config explicitly lists 'use-bind-event-listener' for DOM events. Stable false positive. | ai | |
| phantom-deps | phantom-dep:@atlaskit/tokens | AI (phantom-deps): Design tokens are consumed via Compiled CSS in Atlassian packages; not directly imported in JS but legitimately declared as a dependency. | ai |