@powerlines/plugin-automd
A Powerlines plugin to maintain a project's markdown files using AutoMD generators.
100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
stormie-botsullivanpj
Keywords
automdpowerlinesstorm-softwarepowerlines-plugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-tripled | AI (source-diff): 50x size increase explained by bundling jiti (2.3MB), untyped, acorn into dist/node_modules. Legitimate architectural change from runtime dep to self-bundled deps. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/lodash.deburr/index.cjs | AI (source-diff): lodash.deburr is a well-known lodash utility; net-exec flag is a false positive from rolldown bundler wrapping pattern. No actual network calls in lodash.deburr. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/jiti.cjs | AI (source-diff): jiti's main dist file is minified by design; legitimate package bundled as transitive dep. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.mjs | AI (source-diff): ESM variant of jiti babel dist; minified by design. Legitimate package. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.mjs | AI (source-diff): ESM variant of jiti babel dist; net+exec is inherent to jiti's design as a runtime loader. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/untyped/dist/loader/babel.mjs | AI (source-diff): ESM variant of untyped babel loader; minified by design. Legitimate package. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/lodash.deburr/index.mjs | AI (source-diff): ESM variant of lodash.deburr; net-exec flag is false positive from rolldown bundler wrapping. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/jiti.mjs | AI (source-diff): ESM variant of jiti main dist; minified by design. Legitimate package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large file count increase is due to bundling transitive deps (jiti, untyped, acorn, lodash.deburr) into dist/node_modules, replacing removed 'powerlines' runtime dep. Architectural change, not injection. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.cjs | AI (source-diff): jiti is a legitimate TypeScript/ESM runtime loader; its dist files are minified by design. Bundled into package dist as a transitive dep replacement for removed 'powerlines' runtime dep. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.cjs | AI (source-diff): jiti's core purpose is dynamic code loading/execution; net+exec pattern is inherent to its design, not malicious. Legitimate well-known package bundled as transitive dep. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/untyped/dist/loader/babel.cjs | AI (source-diff): untyped is a legitimate schema generation package from the UnJS ecosystem; minified dist files are expected. Bundled as transitive dep. | ai | |
| phantom-deps | phantom-dep:@stryke/convert | AI (phantom-deps): @stryke/convert is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from stormie-bot to GitHub Actions is a documented CI/CD migration for Storm Software packages; SLSA provenance attestation confirms pipeline integrity. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): defu is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): powerlines is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): @stryke/path is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:markdown-toc | AI (phantom-deps): markdown-toc is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/types | AI (phantom-deps): @stryke/types is a type-only dependency from Storm Software's own ecosystem; config-file-only references are expected for TypeScript type packages. | ai | |
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): @stryke/type-checks is a type-only dependency from Storm Software's own ecosystem; config-file-only references are expected for TypeScript type packages. | ai |
Versions (showing 100 of 589)
| Version | Deps | Published |
|---|---|---|
| 0.1.526 | 10 / 3 | |
| 0.1.525 | 10 / 3 | |
| 0.1.524 | 10 / 3 | |
| 0.1.523 | 10 / 3 | |
| 0.1.522 | 10 / 3 | |
| 0.1.521 | 10 / 3 | |
| 0.1.520 | 10 / 3 | |
| 0.1.519 | 10 / 3 | |
| 0.1.518 | 10 / 3 | |
| 0.1.509 | 10 / 3 | |
| 0.1.508 | 10 / 3 | |
| 0.1.506 | 10 / 3 | |
| 0.1.505 | 10 / 3 | |
| 0.1.504 | 10 / 3 | |
| 0.1.503 | 10 / 3 | |
| 0.1.502 | 10 / 3 | |
| 0.1.501 | 8 / 3 | |
| 0.1.500 | 8 / 3 | |
| 0.1.499 | 8 / 3 | |
| 0.1.497 | 8 / 3 | |
| 0.1.496 | 8 / 3 | |
| 0.1.495 | 8 / 3 | |
| 0.1.494 | 8 / 3 | |
| 0.1.493 | 8 / 3 | |
| 0.1.492 | 8 / 3 | |
| 0.1.491 | 8 / 3 | |
| 0.1.490 | 8 / 3 | |
| 0.1.489 | 8 / 3 | |
| 0.1.488 | 8 / 3 | |
| 0.1.487 | 8 / 3 | |
| 0.1.486 | 8 / 3 | |
| 0.1.485 | 8 / 3 | |
| 0.1.484 | 8 / 3 | |
| 0.1.483 | 8 / 3 | |
| 0.1.482 | 8 / 3 | |
| 0.1.481 | 8 / 3 | |
| 0.1.480 | 8 / 3 | |
| 0.1.479 | 8 / 3 | |
| 0.1.478 | 8 / 3 | |
| 0.1.477 | 8 / 3 | |
| 0.1.476 | 8 / 3 | |
| 0.1.475 | 8 / 3 | |
| 0.1.474 | 8 / 3 | |
| 0.1.473 | 8 / 3 | |
| 0.1.472 | 8 / 3 | |
| 0.1.471 | 8 / 3 | |
| 0.1.470 | 8 / 3 | |
| 0.1.469 | 8 / 3 | |
| 0.1.468 | 8 / 3 | |
| 0.1.465 | 8 / 3 | |
| 0.1.464 | 8 / 3 | |
| 0.1.463 | 8 / 3 | |
| 0.1.462 | 8 / 3 | |
| 0.1.461 | 8 / 3 | |
| 0.1.459 | 8 / 3 | |
| 0.1.458 | 8 / 3 | |
| 0.1.457 | 8 / 3 | |
| 0.1.456 | 8 / 3 | |
| 0.1.455 | 8 / 3 | |
| 0.1.454 | 8 / 3 | |
| 0.1.453 | 8 / 3 | |
| 0.1.452 | 8 / 3 | |
| 0.1.451 | 8 / 3 | |
| 0.1.450 | 8 / 3 | |
| 0.1.449 | 8 / 3 | |
| 0.1.448 | 8 / 3 | |
| 0.1.447 | 8 / 3 | |
| 0.1.446 | 8 / 3 | |
| 0.1.445 | 8 / 3 | |
| 0.1.444 | 8 / 3 | |
| 0.1.443 | 8 / 3 | |
| 0.1.442 | 8 / 3 | |
| 0.1.441 | 8 / 3 | |
| 0.1.440 | 8 / 3 | |
| 0.1.439 | 8 / 3 | |
| 0.1.438 | 8 / 3 | |
| 0.1.437 | 8 / 3 | |
| 0.1.436 | 8 / 3 | |
| 0.1.435 | 8 / 3 | |
| 0.1.434 | 8 / 3 | |
| 0.1.432 | 8 / 3 | |
| 0.1.431 | 8 / 3 | |
| 0.1.430 | 8 / 3 | |
| 0.1.429 | 8 / 3 | |
| 0.1.428 | 8 / 3 | |
| 0.1.427 | 8 / 3 | |
| 0.1.426 | 8 / 3 | |
| 0.1.425 | 8 / 3 | |
| 0.1.424 | 8 / 3 | |
| 0.1.423 | 8 / 3 | |
| 0.1.422 | 8 / 3 | |
| 0.1.421 | 8 / 3 | |
| 0.1.420 | 8 / 3 | |
| 0.1.419 | 8 / 3 | |
| 0.1.418 | 8 / 3 | |
| 0.1.417 | 8 / 3 | |
| 0.1.416 | 8 / 3 | |
| 0.1.415 | 8 / 3 | |
| 0.1.414 | 8 / 3 | |
| 0.1.413 | 8 / 3 |
Showing 100 of 589
Next page →