← Home

@powerlines/plugin-alloy

npm Repository Homepage

A package containing various Alloy framework components and helper utilities.

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

alloy-jspowerlinespowerlines-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff source-size-tripled AI (source-diff): Size increase attributable to vendored vitest/chai test files. ai
source-diff large-new-source-files AI (source-diff): Explained by same vendored test-tooling leak, not injected payload. ai
vendored-integrity unresolved-vendored-tree:dist/node_modules/.pnpm AI (vendored-integrity): Leaked vitest/chai test deps via pnpm store structure, not an implant; no malicious behavior. ai
dependencies unvetted-dep:@power-plant/schema AI (dependencies): Sibling org package, part of coordinated monorepo refactor. ai
source-diff source-size-dropped AI (source-diff): Explained by dependency restructuring, not stub replacement. ai
dependencies unvetted-dep:@power-plant/core AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
dependencies unvetted-dep:@powerlines/plugin-power-plant AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
dependencies unvetted-dep:@power-plant/alloy-js AI (dependencies): Sibling package from same publisher/monorepo, part of refactor. ai
provenance publisher-changed AI (provenance): stormie-bot is the org's automation account with 2775 approved packages; publisher change from GH Actions is expected CI/CD rotation. ai
phantom-deps phantom-dep:@vue/shared AI (phantom-deps): @vue/shared is a framework-scoped Vue internal loaded by convention; not directly imported but legitimately used as a peer/transitive dep in Vue-ecosystem packages. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is from the same @alloy-js namespace already present in the package; not a suspicious lateral dependency addition. ai
phantom-deps phantom-dep:@alloy-js/core AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:defu AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/json AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/path AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/capnp AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/convert AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/helpers AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@alloy-js/markdown AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/type-checks AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@alloy-js/typescript AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@stryke/string-format AI (phantom-deps): Config-referenced dependency; stable pattern for this build tool package. ai
phantom-deps phantom-dep:@babel/preset-typescript AI (phantom-deps): Framework-scoped Babel preset; loaded by convention, not direct import. ai
dependencies unvetted-dep:@alloy-js/rollup-plugin AI (dependencies): @alloy-js/rollup-plugin is part of the same @alloy-js ecosystem as other vetted deps in this package; consistent with legitimate Alloy framework usage. ai
phantom-deps phantom-dep:@powerlines/deepkit AI (phantom-deps): Same-org monorepo package; phantom dep pattern is expected in this monorepo setup. ai
phantom-deps phantom-dep:@alloy-js/rollup-plugin AI (phantom-deps): Build tool dependency referenced in config files, not directly imported at runtime. Expected pattern for a plugin package in this ecosystem. ai
phantom-deps phantom-dep:powerlines AI (phantom-deps): powerlines is the parent framework package; referenced in config files by convention for this plugin package. Stable false positive for this org's plugin packages. ai
phantom-deps phantom-dep:@powerlines/plugin-babel AI (phantom-deps): Same-org plugin dependency referenced by convention. Stable false positive for this package. ai
phantom-deps phantom-dep:@powerlines/plugin-plugin AI (phantom-deps): Same-org plugin dependency referenced by convention. Stable false positive for this package. ai
phantom-deps phantom-dep:@babel/plugin-syntax-typescript AI (phantom-deps): Framework-scoped Babel plugin loaded by convention. Standard pattern for TypeScript-aware plugin packages. ai
phantom-deps phantom-dep:@babel/plugin-syntax-jsx AI (phantom-deps): Framework-scoped Babel plugin loaded by convention, not direct import. Standard pattern for packages integrating with Babel transform pipelines. ai
phantom-deps phantom-dep:@stryke/unique-id AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@stryke/types AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@stryke/fs AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:prettier AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:unctx AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@storm-software/config-tools AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@alloy-js/babel-preset AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai
phantom-deps phantom-dep:@alloy-js/json AI (phantom-deps): Build/config dependency; legitimate pattern in TypeScript/monorepo projects. ai

Versions (showing 100 of 538)

Version Deps Published
0.26.21 22 / 2
0.26.20 22 / 2
0.26.19 22 / 2
0.26.18 22 / 2
0.26.17 22 / 2
0.26.16 22 / 2
0.26.15 22 / 2
0.26.14 22 / 2
0.26.13 22 / 2
0.26.12 22 / 2
0.26.11 22 / 2
0.26.10 22 / 2
0.26.9 22 / 2
0.26.8 22 / 2
0.26.7 22 / 2
0.26.6 22 / 2
0.26.5 22 / 2
0.26.4 22 / 2
0.26.3 22 / 2
0.26.2 22 / 2
0.26.1 22 / 2
0.26.0 22 / 2
0.25.70 22 / 2
0.25.69 22 / 2
0.25.68 22 / 2
0.25.67 22 / 2
0.25.66 22 / 2
0.25.65 22 / 2
0.25.64 22 / 2
0.25.63 22 / 2
0.25.62 22 / 2
0.25.61 22 / 2
0.25.60 22 / 2
0.25.59 22 / 2
0.25.58 22 / 2
0.25.57 22 / 2
0.25.56 22 / 2
0.25.55 22 / 2
0.25.54 22 / 2
0.25.53 22 / 2
0.25.52 22 / 2
0.25.51 22 / 2
0.25.49 22 / 2
0.25.48 22 / 2
0.25.47 22 / 2
0.25.46 22 / 2
0.25.45 22 / 2
0.25.44 22 / 2
0.25.41 22 / 2
0.25.40 22 / 2
0.25.39 22 / 2
0.25.38 22 / 2
0.25.37 22 / 2
0.25.36 22 / 2
0.25.35 22 / 2
0.25.34 22 / 2
0.25.33 23 / 2
0.25.32 23 / 2
0.25.31 23 / 2
0.25.30 23 / 2
0.25.29 23 / 2
0.25.28 23 / 2
0.25.27 23 / 2
0.25.26 23 / 2
0.25.25 23 / 2
0.25.24 23 / 2
0.25.23 23 / 2
0.25.22 23 / 2
0.25.21 23 / 2
0.25.20 23 / 2
0.25.18 23 / 2
0.25.17 23 / 2
0.25.16 23 / 2
0.25.15 23 / 2
0.25.14 23 / 2
0.25.13 23 / 2
0.25.12 23 / 2
0.25.11 23 / 2
0.25.10 23 / 2
0.25.9 23 / 2
0.25.7 23 / 2
0.25.6 23 / 2
0.25.5 23 / 2
0.25.4 23 / 2
0.25.3 23 / 2
0.25.2 23 / 2
0.25.1 23 / 2
0.25.0 23 / 2
0.24.6 23 / 2
0.24.5 23 / 2
0.24.4 23 / 2
0.24.3 23 / 2
0.24.2 23 / 2
0.24.1 23 / 2
0.24.0 23 / 2
0.23.40 23 / 2
0.23.39 23 / 2
0.23.38 23 / 2
0.23.37 23 / 2
0.23.36 23 / 2
Showing 100 of 538 Next page →