@pipeline-builder/pipeline-manager
CLI for Pipeline Builder — self-service AWS CodePipeline platform with 124 reusable containerized plugins, per-org compliance enforcement, and multi-tenant isolation.
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mwashburn160
Keywords
ci-cdcicdcontinuous-deliverydevopsself-serviceplatform-engineeringinternal-developer-platformdeveloper-platformawsaws-cdkcdkcodepipelinecodebuildcloudformationpipelinepipeline-as-codeinfrastructure-as-codeiaccompliancepolicy-as-codegovernancegolden-pathsmulti-tenantrbacaiai-pipeline-generationllmbedrockpluginsplugin-marketplacecontainerizeddockerkubernetestypescriptcli
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/utils/platform-secret.js | AI (source-diff): Readable compiled TypeScript/ESM; long lines from bundling, not obfuscation. | ai | |
| phantom-deps | phantom-dep:@aws-sdk/client-sts | AI (phantom-deps): AWS SDK STS is a legitimate transitive/peer dep for an AWS CLI tool; stable false positive. | ai | |
| source-diff | obfuscated-file:dist/agent/ports.js | AI (source-diff): Readable compiled TypeScript/ESM; long lines from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/bootstrap.js | AI (source-diff): Compiled TypeScript ESM with full comments; long lines from bundler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/tools.js | AI (source-diff): Compiled TypeScript ESM; long lines from bundler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/post-steps.js | AI (source-diff): Compiled TypeScript ESM with full comments; long lines from bundler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/env-file.js | AI (source-diff): Compiled TypeScript ESM with full comments; long lines from bundler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/health.js | AI (source-diff): Readable compiled TS output; long lines from bundler, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/ai.js | AI (source-diff): Readable compiled TS output; long lines from bundler, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/agent/executor.js | AI (source-diff): Readable compiled TS output; long lines from bundler, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/prereqs.js | AI (source-diff): Readable compiled TS output; long lines from bundler, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/commands/provision.js | AI (source-diff): Readable compiled TS output; long lines from bundler, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/targets.js | AI (source-diff): Readable compiled TS output; long lines from bundler, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/agent/troubleshoot.js | AI (source-diff): Readable compiled TS output; long lines from bundler, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/commands/org-export.js | AI (source-diff): File is standard tsc-compiled JS output, not obfuscated; long lines are TypeScript helper boilerplate. | ai | |
| source-diff | obfuscated-file:dist/commands/store-registry-credentials.js | AI (source-diff): Standard TypeScript compiler output with __importStar helpers; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/utils/plugin-resolver.js | AI (source-diff): Readable TypeScript-compiled output; long lines from bundled JS, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/commands/register.js | AI (source-diff): Readable TypeScript-compiled output with full JSDoc; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/utils/registry.js | AI (source-diff): Readable TypeScript-compiled output; STS/crypto usage is consistent with documented AWS registration flow. | ai | |
| source-diff | obfuscated-file:dist/commands/audit-tokens.js | AI (source-diff): Readable compiled TypeScript output; long lines are bundled AWS SDK code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/commands/audit-stacks.js | AI (source-diff): Readable compiled TypeScript output; long lines are bundled AWS SDK code, not obfuscation. | ai | |
| phantom-deps | phantom-dep:typescript | AI (phantom-deps): typescript is declared in both devDependencies and dependencies (unusual but not malicious); phantom-dep fires because it's a build tool not directly imported in source. | ai | |
| source-diff | obfuscated-file:dist/commands/validate-templates.js | AI (source-diff): File is standard TypeScript compiler output (tsc CommonJS), not obfuscated. Long lines are from generated type-checking code, not malicious encoding. | ai | |
| phantom-deps | phantom-dep:progress | AI (phantom-deps): progress is a legitimate runtime dependency for CLI progress bars; phantom-dep heuristic fires because it may not be directly imported at the top level. | ai |
Versions (showing 51 of 159)
| Version | Deps | Published |
|---|---|---|
| 3.4.125 | 17 / 15 | |
| 3.4.124 | 17 / 15 | |
| 3.4.123 | 17 / 15 | |
| 3.4.122 | 17 / 15 | |
| 3.4.121 | 17 / 15 | |
| 3.4.120 | 17 / 15 | |
| 3.4.119 | 17 / 15 | |
| 3.4.118 | 17 / 15 | |
| 3.4.117 | 17 / 15 | |
| 3.4.116 | 17 / 15 | |
| 3.4.115 | 17 / 15 | |
| 3.4.114 | 17 / 15 | |
| 3.4.113 | 17 / 15 | |
| 3.4.112 | 17 / 15 | |
| 3.4.111 | 17 / 15 | |
| 3.4.110 | 17 / 15 | |
| 3.4.109 | 17 / 15 | |
| 3.4.108 | 17 / 15 | |
| 3.4.107 | 17 / 15 | |
| 3.4.106 | 17 / 15 | |
| 3.4.105 | 17 / 15 | |
| 3.4.104 | 17 / 15 | |
| 3.4.103 | 17 / 15 | |
| 3.4.102 | 17 / 15 | |
| 3.4.101 | 17 / 15 | |
| 3.4.100 | 17 / 15 | |
| 3.4.99 | 17 / 15 | |
| 3.4.98 | 17 / 15 | |
| 3.4.97 | 17 / 15 | |
| 3.4.96 | 17 / 15 | |
| 3.4.95 | 17 / 15 | |
| 3.4.94 | 17 / 15 | |
| 3.4.93 | 17 / 15 | |
| 3.4.92 | 17 / 15 | |
| 3.4.91 | 17 / 15 | |
| 3.4.90 | 17 / 15 | |
| 3.4.89 | 17 / 15 | |
| 3.4.88 | 17 / 15 | |
| 3.4.87 | 17 / 15 | |
| 3.4.86 | 17 / 15 | |
| 3.4.85 | 17 / 15 | |
| 3.4.84 | 17 / 15 | |
| 3.4.83 | 17 / 15 | |
| 3.4.82 | 17 / 15 | |
| 3.4.81 | 17 / 15 | |
| 3.4.80 | 17 / 15 | |
| 3.4.79 | 17 / 15 | |
| 3.4.78 | 17 / 15 | |
| 3.4.77 | 17 / 15 | |
| 3.4.76 | 17 / 15 | |
| 3.4.75 | 17 / 15 |