@powerlines/plugin-automd
A Powerlines plugin to maintain a project's markdown files using AutoMD generators.
100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
stormie-botsullivanpj
Keywords
automdpowerlinesstorm-softwarepowerlines-plugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-tripled | AI (source-diff): 50x size increase explained by bundling jiti (2.3MB), untyped, acorn into dist/node_modules. Legitimate architectural change from runtime dep to self-bundled deps. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/lodash.deburr/index.cjs | AI (source-diff): lodash.deburr is a well-known lodash utility; net-exec flag is a false positive from rolldown bundler wrapping pattern. No actual network calls in lodash.deburr. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/jiti.cjs | AI (source-diff): jiti's main dist file is minified by design; legitimate package bundled as transitive dep. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.mjs | AI (source-diff): ESM variant of jiti babel dist; minified by design. Legitimate package. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.mjs | AI (source-diff): ESM variant of jiti babel dist; net+exec is inherent to jiti's design as a runtime loader. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/untyped/dist/loader/babel.mjs | AI (source-diff): ESM variant of untyped babel loader; minified by design. Legitimate package. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/lodash.deburr/index.mjs | AI (source-diff): ESM variant of lodash.deburr; net-exec flag is false positive from rolldown bundler wrapping. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/jiti.mjs | AI (source-diff): ESM variant of jiti main dist; minified by design. Legitimate package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large file count increase is due to bundling transitive deps (jiti, untyped, acorn, lodash.deburr) into dist/node_modules, replacing removed 'powerlines' runtime dep. Architectural change, not injection. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.cjs | AI (source-diff): jiti is a legitimate TypeScript/ESM runtime loader; its dist files are minified by design. Bundled into package dist as a transitive dep replacement for removed 'powerlines' runtime dep. | ai | |
| source-diff | net-exec-file:dist/node_modules/.pnpm/[email protected]/node_modules/jiti/dist/babel.cjs | AI (source-diff): jiti's core purpose is dynamic code loading/execution; net+exec pattern is inherent to its design, not malicious. Legitimate well-known package bundled as transitive dep. | ai | |
| source-diff | obfuscated-file:dist/node_modules/.pnpm/[email protected]/node_modules/untyped/dist/loader/babel.cjs | AI (source-diff): untyped is a legitimate schema generation package from the UnJS ecosystem; minified dist files are expected. Bundled as transitive dep. | ai | |
| phantom-deps | phantom-dep:@stryke/convert | AI (phantom-deps): @stryke/convert is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from stormie-bot to GitHub Actions is a documented CI/CD migration for Storm Software packages; SLSA provenance attestation confirms pipeline integrity. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): defu is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): powerlines is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): @stryke/path is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:markdown-toc | AI (phantom-deps): markdown-toc is a declared runtime dependency used in config files; phantom-dep false positive for this plugin package pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/types | AI (phantom-deps): @stryke/types is a type-only dependency from Storm Software's own ecosystem; config-file-only references are expected for TypeScript type packages. | ai | |
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): @stryke/type-checks is a type-only dependency from Storm Software's own ecosystem; config-file-only references are expected for TypeScript type packages. | ai |
Versions (showing 100 of 590)
| Version | Deps | Published |
|---|---|---|
| 0.1.412 | 8 / 3 | |
| 0.1.411 | 8 / 3 | |
| 0.1.410 | 8 / 3 | |
| 0.1.409 | 8 / 3 | |
| 0.1.408 | 8 / 3 | |
| 0.1.406 | 8 / 3 | |
| 0.1.405 | 8 / 3 | |
| 0.1.404 | 8 / 3 | |
| 0.1.403 | 8 / 3 | |
| 0.1.402 | 8 / 3 | |
| 0.1.401 | 8 / 3 | |
| 0.1.400 | 8 / 3 | |
| 0.1.399 | 8 / 3 | |
| 0.1.398 | 8 / 3 | |
| 0.1.397 | 8 / 3 | |
| 0.1.396 | 8 / 3 | |
| 0.1.395 | 8 / 3 | |
| 0.1.394 | 8 / 3 | |
| 0.1.393 | 8 / 3 | |
| 0.1.392 | 8 / 3 | |
| 0.1.391 | 8 / 3 | |
| 0.1.390 | 8 / 3 | |
| 0.1.389 | 8 / 3 | |
| 0.1.388 | 8 / 3 | |
| 0.1.387 | 8 / 3 | |
| 0.1.386 | 8 / 3 | |
| 0.1.385 | 8 / 3 | |
| 0.1.384 | 8 / 3 | |
| 0.1.383 | 8 / 3 | |
| 0.1.382 | 8 / 3 | |
| 0.1.381 | 8 / 3 | |
| 0.1.380 | 8 / 3 | |
| 0.1.379 | 8 / 3 | |
| 0.1.378 | 8 / 3 | |
| 0.1.377 | 8 / 3 | |
| 0.1.376 | 8 / 3 | |
| 0.1.375 | 8 / 3 | |
| 0.1.374 | 8 / 3 | |
| 0.1.373 | 8 / 3 | |
| 0.1.372 | 8 / 3 | |
| 0.1.371 | 8 / 3 | |
| 0.1.370 | 8 / 3 | |
| 0.1.369 | 8 / 3 | |
| 0.1.368 | 8 / 3 | |
| 0.1.367 | 8 / 3 | |
| 0.1.366 | 8 / 3 | |
| 0.1.365 | 8 / 3 | |
| 0.1.363 | 8 / 3 | |
| 0.1.362 | 8 / 3 | |
| 0.1.361 | 8 / 3 | |
| 0.1.360 | 8 / 3 | |
| 0.1.359 | 8 / 3 | |
| 0.1.358 | 8 / 3 | |
| 0.1.355 | 8 / 3 | |
| 0.1.354 | 8 / 3 | |
| 0.1.353 | 8 / 3 | |
| 0.1.352 | 8 / 3 | |
| 0.1.351 | 8 / 3 | |
| 0.1.350 | 8 / 3 | |
| 0.1.349 | 8 / 3 | |
| 0.1.348 | 8 / 3 | |
| 0.1.347 | 8 / 3 | |
| 0.1.346 | 8 / 3 | |
| 0.1.345 | 8 / 3 | |
| 0.1.344 | 8 / 3 | |
| 0.1.343 | 8 / 3 | |
| 0.1.342 | 8 / 3 | |
| 0.1.341 | 8 / 3 | |
| 0.1.340 | 8 / 3 | |
| 0.1.339 | 8 / 3 | |
| 0.1.338 | 8 / 3 | |
| 0.1.337 | 8 / 3 | |
| 0.1.336 | 8 / 3 | |
| 0.1.334 | 8 / 3 | |
| 0.1.333 | 8 / 3 | |
| 0.1.332 | 8 / 3 | |
| 0.1.331 | 8 / 3 | |
| 0.1.330 | 8 / 3 | |
| 0.1.329 | 8 / 3 | |
| 0.1.328 | 8 / 3 | |
| 0.1.327 | 8 / 3 | |
| 0.1.326 | 8 / 3 | |
| 0.1.325 | 8 / 3 | |
| 0.1.324 | 8 / 3 | |
| 0.1.323 | 8 / 3 | |
| 0.1.322 | 8 / 3 | |
| 0.1.321 | 8 / 3 | |
| 0.1.320 | 8 / 3 | |
| 0.1.319 | 8 / 3 | |
| 0.1.318 | 8 / 3 | |
| 0.1.317 | 8 / 3 | |
| 0.1.316 | 8 / 3 | |
| 0.1.315 | 8 / 3 | |
| 0.1.314 | 8 / 3 | |
| 0.1.313 | 8 / 3 | |
| 0.1.312 | 8 / 3 | |
| 0.1.311 | 8 / 3 | |
| 0.1.310 | 8 / 3 | |
| 0.1.309 | 8 / 3 | |
| 0.1.308 | 8 / 3 |
Showing 100 of 590
Next page →