← Home

@powerlines/plugin-alloy

npm Repository Homepage

A package containing various Alloy framework components and helper utilities.

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

alloy-jspowerlinespowerlines-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff source-size-tripled AI (source-diff): Size increase attributable to vendored vitest/chai test files. ai
source-diff large-new-source-files AI (source-diff): Explained by same vendored test-tooling leak, not injected payload. ai
vendored-integrity unresolved-vendored-tree:dist/node_modules/.pnpm AI (vendored-integrity): Leaked vitest/chai test deps via pnpm store structure, not an implant; no malicious behavior. ai
dependencies unvetted-dep:@power-plant/schema AI (dependencies): Sibling org package, part of coordinated monorepo refactor. ai
source-diff source-size-dropped AI (source-diff): Explained by dependency restructuring, not stub replacement. ai
dependencies unvetted-dep:@power-plant/core AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
dependencies unvetted-dep:@powerlines/plugin-power-plant AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
dependencies unvetted-dep:@power-plant/alloy-js AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
provenance publisher-changed AI (provenance): stormie-bot is the org's automation account with 2775 approved packages; publisher change from GH Actions is expected CI/CD rotation. ai
phantom-deps phantom-dep:@vue/shared AI (phantom-deps): @vue/shared is a framework-scoped Vue internal loaded by convention; not directly imported but legitimately used as a peer/transitive dep in Vue-ecosystem packages. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is from the same @alloy-js namespace already present in the package; not a suspicious lateral dependency addition. ai
phantom-deps phantom-dep:@alloy-js/core AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:defu AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/json AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/path AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/capnp AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/convert AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/helpers AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@alloy-js/markdown AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/type-checks AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@alloy-js/typescript AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/string-format AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@babel/preset-typescript AI (phantom-deps): Framework-scoped Babel preset; loaded by convention, not direct import. ai
dependencies unvetted-dep:@alloy-js/rollup-plugin AI (dependencies): @alloy-js/rollup-plugin is part of the same @alloy-js ecosystem as other vetted deps in this package; consistent with legitimate Alloy framework usage. ai
phantom-deps phantom-dep:@powerlines/deepkit AI (phantom-deps): Same-org monorepo package; phantom dep pattern is expected in this monorepo setup. ai
phantom-deps phantom-dep:@alloy-js/rollup-plugin AI (phantom-deps): Build tool dependency referenced in config files, not directly imported at runtime. Expected pattern for a plugin package in this ecosystem. ai
phantom-deps phantom-dep:powerlines AI (phantom-deps): powerlines is the parent framework package; referenced in config files by convention for this plugin package. Stable false positive for this org's plugin packages. ai
phantom-deps phantom-dep:@powerlines/plugin-babel AI (phantom-deps): Same-org plugin dependency referenced by convention. Stable false positive for this package. ai
phantom-deps phantom-dep:@powerlines/plugin-plugin AI (phantom-deps): Same-org plugin dependency referenced by convention. Stable false positive for this package. ai
phantom-deps phantom-dep:@babel/plugin-syntax-typescript AI (phantom-deps): Framework-scoped Babel plugin loaded by convention. Standard pattern for TypeScript-aware plugin packages. ai
phantom-deps phantom-dep:@babel/plugin-syntax-jsx AI (phantom-deps): Framework-scoped Babel plugin loaded by convention, not direct import. Standard pattern for packages integrating with Babel transform pipelines. ai
phantom-deps phantom-dep:@stryke/unique-id AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@stryke/types AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@stryke/fs AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:prettier AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:unctx AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@storm-software/config-tools AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@alloy-js/babel-preset AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@alloy-js/json AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai

Versions (showing 100 of 538)

Version Deps Published
0.26.127 21 / 3
0.26.126 21 / 3
0.26.125 21 / 3
0.26.124 21 / 3
0.26.123 21 / 3
0.26.122 22 / 2
0.26.121 22 / 2
0.26.119 22 / 2
0.26.118 22 / 2
0.26.117 22 / 2
0.26.116 22 / 2
0.26.115 22 / 2
0.26.114 23 / 2
0.26.113 23 / 2
0.26.112 23 / 2
0.26.111 23 / 2
0.26.110 23 / 2
0.26.109 23 / 2
0.26.108 23 / 2
0.26.107 23 / 2
0.26.106 23 / 2
0.26.105 23 / 2
0.26.104 23 / 2
0.26.103 23 / 2
0.26.102 23 / 2
0.26.101 23 / 2
0.26.100 23 / 2
0.26.99 23 / 2
0.26.98 23 / 2
0.26.97 23 / 2
0.26.96 23 / 2
0.26.95 23 / 2
0.26.94 23 / 2
0.26.93 23 / 2
0.26.92 23 / 2
0.26.91 23 / 2
0.26.90 23 / 2
0.26.89 23 / 2
0.26.88 23 / 2
0.26.87 23 / 2
0.26.84 23 / 2
0.26.83 23 / 2
0.26.82 23 / 2
0.26.81 23 / 2
0.26.80 23 / 2
0.26.78 23 / 2
0.26.77 23 / 2
0.26.76 23 / 2
0.26.75 23 / 2
0.26.74 23 / 2
0.26.73 23 / 2
0.26.72 23 / 2
0.26.71 23 / 2
0.26.70 23 / 2
0.26.69 23 / 2
0.26.68 23 / 2
0.26.67 23 / 2
0.26.66 23 / 2
0.26.65 23 / 2
0.26.64 23 / 2
0.26.63 23 / 2
0.26.62 23 / 2
0.26.61 23 / 2
0.26.60 23 / 2
0.26.59 23 / 2
0.26.58 23 / 2
0.26.57 23 / 2
0.26.56 23 / 2
0.26.54 23 / 2
0.26.53 23 / 2
0.26.52 23 / 2
0.26.51 23 / 2
0.26.49 23 / 2
0.26.48 23 / 2
0.26.47 23 / 2
0.26.46 23 / 2
0.26.45 23 / 2
0.26.44 23 / 2
0.26.43 23 / 2
0.26.42 23 / 2
0.26.41 23 / 2
0.26.40 23 / 2
0.26.39 23 / 2
0.26.38 23 / 2
0.26.37 23 / 2
0.26.36 23 / 2
0.26.35 23 / 2
0.26.34 23 / 2
0.26.33 23 / 2
0.26.32 22 / 2
0.26.31 22 / 2
0.26.30 22 / 2
0.26.29 23 / 2
0.26.28 23 / 2
0.26.27 22 / 2
0.26.26 22 / 2
0.26.25 22 / 2
0.26.24 22 / 2
0.26.23 22 / 2
0.26.22 22 / 2
Showing 100 of 538 Next page →