← Home

@powerlines/plugin-alloy

npm Repository Homepage

A package containing various Alloy framework components and helper utilities.

100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

alloy-jspowerlinespowerlines-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff source-size-tripled AI (source-diff): Size increase attributable to vendored vitest/chai test files. ai
source-diff large-new-source-files AI (source-diff): Explained by same vendored test-tooling leak, not injected payload. ai
vendored-integrity unresolved-vendored-tree:dist/node_modules/.pnpm AI (vendored-integrity): Leaked vitest/chai test deps via pnpm store structure, not an implant; no malicious behavior. ai
dependencies unvetted-dep:@power-plant/schema AI (dependencies): Sibling org package, part of coordinated monorepo refactor. ai
source-diff source-size-dropped AI (source-diff): Explained by dependency restructuring, not stub replacement. ai
dependencies unvetted-dep:@power-plant/core AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
dependencies unvetted-dep:@powerlines/plugin-power-plant AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
dependencies unvetted-dep:@power-plant/alloy-js AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
provenance publisher-changed AI (provenance): stormie-bot is the org's automation account with 2775 approved packages; publisher change from GH Actions is expected CI/CD rotation. ai
phantom-deps phantom-dep:@vue/shared AI (phantom-deps): @vue/shared is a framework-scoped Vue internal loaded by convention; not directly imported but legitimately used as a peer/transitive dep in Vue-ecosystem packages. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is from the same @alloy-js namespace already present in the package; not a suspicious lateral dependency addition. ai
phantom-deps phantom-dep:@alloy-js/core AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:defu AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/json AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/path AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/capnp AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/convert AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/helpers AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@alloy-js/markdown AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/type-checks AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@alloy-js/typescript AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/string-format AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@babel/preset-typescript AI (phantom-deps): Framework-scoped Babel preset; loaded by convention, not direct import. ai
dependencies unvetted-dep:@alloy-js/rollup-plugin AI (dependencies): @alloy-js/rollup-plugin is part of the same @alloy-js ecosystem as other vetted deps in this package; consistent with legitimate Alloy framework usage. ai
phantom-deps phantom-dep:@powerlines/deepkit AI (phantom-deps): Same-org monorepo package; phantom dep pattern is expected in this monorepo setup. ai
phantom-deps phantom-dep:@alloy-js/rollup-plugin AI (phantom-deps): Build tool dependency referenced in config files, not directly imported at runtime. Expected pattern for a plugin package in this ecosystem. ai
phantom-deps phantom-dep:powerlines AI (phantom-deps): powerlines is the parent framework package; referenced in config files by convention for this plugin package. Stable false positive for this org's plugin packages. ai
phantom-deps phantom-dep:@powerlines/plugin-babel AI (phantom-deps): Same-org plugin dependency referenced by convention. Stable false positive for this package. ai
phantom-deps phantom-dep:@powerlines/plugin-plugin AI (phantom-deps): Same-org plugin dependency referenced by convention. Stable false positive for this package. ai
phantom-deps phantom-dep:@babel/plugin-syntax-typescript AI (phantom-deps): Framework-scoped Babel plugin loaded by convention. Standard pattern for TypeScript-aware plugin packages. ai
phantom-deps phantom-dep:@babel/plugin-syntax-jsx AI (phantom-deps): Framework-scoped Babel plugin loaded by convention, not direct import. Standard pattern for packages integrating with Babel transform pipelines. ai
phantom-deps phantom-dep:@stryke/unique-id AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@stryke/types AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@stryke/fs AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:prettier AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:unctx AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@storm-software/config-tools AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@alloy-js/babel-preset AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@alloy-js/json AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai

Versions (showing 100 of 538)

Version Deps Published
0.23.35 23 / 2
0.23.34 23 / 2
0.23.33 23 / 2
0.23.32 23 / 2
0.23.31 23 / 2
0.23.30 23 / 2
0.23.29 23 / 2
0.23.28 23 / 2
0.23.27 23 / 2
0.23.26 23 / 2
0.23.25 23 / 2
0.23.24 23 / 2
0.23.23 23 / 2
0.23.22 23 / 2
0.23.21 23 / 2
0.23.20 23 / 2
0.23.19 23 / 2
0.23.18 23 / 2
0.23.17 23 / 2
0.23.16 23 / 2
0.23.15 23 / 2
0.23.14 23 / 2
0.23.13 23 / 2
0.23.12 23 / 2
0.23.11 23 / 2
0.23.10 23 / 2
0.23.9 23 / 2
0.23.8 23 / 2
0.23.7 23 / 2
0.23.6 23 / 2
0.23.5 23 / 2
0.23.4 23 / 2
0.23.3 23 / 2
0.23.2 23 / 2
0.23.1 23 / 2
0.23.0 23 / 2
0.22.1 23 / 2
0.22.0 23 / 2
0.21.4 23 / 2
0.21.3 23 / 2
0.21.2 23 / 2
0.21.1 23 / 2
0.21.0 23 / 2
0.20.15 23 / 2
0.20.14 23 / 2
0.20.13 23 / 2
0.20.12 23 / 2
0.20.11 23 / 2
0.20.10 23 / 2
0.20.9 23 / 2
0.20.8 23 / 2
0.20.7 23 / 2
0.20.6 23 / 2
0.20.5 23 / 2
0.20.4 23 / 2
0.20.3 23 / 2
0.20.2 23 / 2
0.20.1 23 / 2
0.20.0 23 / 2
0.19.37 23 / 2
0.19.36 23 / 2
0.19.35 23 / 2
0.19.34 23 / 2
0.19.33 23 / 2
0.19.32 23 / 2
0.19.31 23 / 2
0.19.30 23 / 2
0.19.29 23 / 2
0.19.28 23 / 2
0.19.27 23 / 2
0.19.26 23 / 2
0.19.25 23 / 2
0.19.24 23 / 2
0.19.23 23 / 2
0.19.22 23 / 2
0.19.21 23 / 2
0.19.20 23 / 2
0.19.19 23 / 2
0.19.18 23 / 2
0.19.17 23 / 2
0.19.16 23 / 2
0.19.15 23 / 2
0.19.14 23 / 2
0.19.13 23 / 2
0.19.12 23 / 2
0.19.11 23 / 2
0.19.10 23 / 2
0.19.9 23 / 2
0.19.8 23 / 2
0.19.7 23 / 2
0.19.6 22 / 2
0.19.5 22 / 2
0.19.4 22 / 2
0.19.3 22 / 2
0.19.2 22 / 2
0.19.1 22 / 2
0.19.0 22 / 2
0.18.119 22 / 2
0.18.118 22 / 2
0.18.117 22 / 2
Showing 100 of 538 Next page →