@atlaskit/editor-prosemirror
11
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
atlassianartifactteamadf-schema-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:prosemirror-view | AI (dependencies): prosemirror-view is a core, well-established prosemirror ecosystem package. This wrapper package's purpose is to re-export prosemirror libraries. | ai | |
| dependencies | unvetted-dep:prosemirror-model | AI (dependencies): prosemirror-model is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-state | AI (dependencies): prosemirror-state is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-utils | AI (dependencies): prosemirror-utils is a well-known prosemirror utility package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-keymap | AI (dependencies): prosemirror-keymap is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-history | AI (dependencies): prosemirror-history is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-commands | AI (dependencies): prosemirror-commands is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-markdown | AI (dependencies): prosemirror-markdown is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-transform | AI (dependencies): prosemirror-transform is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| dependencies | unvetted-dep:prosemirror-dropcursor | AI (dependencies): prosemirror-dropcursor is a core, well-established prosemirror ecosystem package. Expected dependency for this wrapper. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get() is used in a standard ES6 Proxy get trap in transform-override.ts — a legitimate, documented pattern for forwarding property access, not obfuscation. | ai |