@powerlines/plugin-babel
A package containing a Powerlines plugin to assist in developing other Powerlines plugins.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed from stormie-bot to GitHub Actions as part of a CI/CD migration; SLSA provenance attestation confirms legitimate automated publishing. Stable for this package going forward. | ai | |
| phantom-deps | phantom-dep:unplugin | AI (phantom-deps): Config-file referenced dependency; legitimate use in plugin architecture. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): Config-file referenced dependency; legitimate use in build tooling context. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): Config-file referenced dependency; legitimate use in build tooling context. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): Config-file referenced dependency; legitimate use in build tooling. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): Config-file referenced dependency; legitimate for Powerlines plugin package. | ai | |
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): Config-file referenced dependency; legitimate use in build tooling. | ai | |
| phantom-deps | phantom-dep:@storm-software/config-tools | AI (phantom-deps): Config-file referenced dependency; legitimate use in Storm Software monorepo context. | ai | |
| phantom-deps | phantom-dep:@babel/parser | AI (phantom-deps): Framework-scoped package loaded by Babel plugin convention; stable for this package type. | ai | |
| phantom-deps | phantom-dep:@babel/helper-plugin-utils | AI (phantom-deps): Framework-scoped package loaded by Babel plugin convention; stable for this package type. | ai | |
| phantom-deps | phantom-dep:@babel/core | AI (phantom-deps): Framework-scoped package loaded by Babel plugin convention; stable for this package type. | ai | |
| phantom-deps | phantom-dep:@babel/types | AI (phantom-deps): Framework-scoped package loaded by Babel plugin convention; stable for this package type. | ai | |
| phantom-deps | phantom-dep:@babel/generator | AI (phantom-deps): Framework-scoped package loaded by Babel plugin convention; stable for this package type. | ai | |
| dependencies | unvetted-dep:@powerlines/core | AI (dependencies): @powerlines/core is a sibling package in the same Storm Software monorepo/namespace; the unvetted status reflects review pipeline ordering, not an independent supply chain risk. | ai | |
| phantom-deps | phantom-dep:@babel/plugin-syntax-typescript | AI (phantom-deps): Declared as both a direct dependency and peer dependency; framework-scoped package loaded by convention in Babel plugin ecosystems. Not a real phantom dep concern. | ai | |
| provenance | slsa-provenance | AI (provenance): Package consistently published via CI/CD with SLSA provenance attestation; this is a stable characteristic of the Storm Software release pipeline. | ai | |
| phantom-deps | phantom-dep:@stryke/types | AI (phantom-deps): Referenced in config files only; consistent with ecosystem tooling patterns in the Storm Software monorepo. | ai | |
| phantom-deps | phantom-dep:@stryke/fs | AI (phantom-deps): Referenced in config files only; consistent with ecosystem tooling patterns in the Storm Software monorepo. | ai | |
| phantom-deps | phantom-dep:jiti | AI (phantom-deps): jiti is a config-file loader commonly referenced in config files but not directly imported in source; this is a known pattern for build tools. | ai |
Versions (showing 51 of 511)
| Version | Deps | Published |
|---|---|---|
| 0.13.159 | 15 / 5 | |
| 0.13.158 | 15 / 5 | |
| 0.13.157 | 15 / 5 | |
| 0.13.156 | 15 / 5 | |
| 0.13.155 | 15 / 5 | |
| 0.13.154 | 15 / 5 | |
| 0.13.153 | 15 / 5 | |
| 0.13.152 | 15 / 5 | |
| 0.13.151 | 15 / 5 | |
| 0.13.150 | 15 / 5 | |
| 0.13.149 | 15 / 5 | |
| 0.13.148 | 15 / 5 | |
| 0.13.147 | 15 / 5 | |
| 0.13.146 | 15 / 5 | |
| 0.13.145 | 15 / 5 | |
| 0.13.143 | 15 / 5 | |
| 0.13.142 | 15 / 5 | |
| 0.13.141 | 15 / 5 | |
| 0.13.140 | 15 / 5 | |
| 0.13.139 | 15 / 5 | |
| 0.13.138 | 15 / 5 | |
| 0.13.137 | 15 / 5 | |
| 0.13.136 | 15 / 5 | |
| 0.13.135 | 15 / 2 | |
| 0.13.134 | 15 / 2 | |
| 0.13.133 | 15 / 2 | |
| 0.13.132 | 15 / 2 | |
| 0.13.131 | 15 / 2 | |
| 0.13.130 | 15 / 2 | |
| 0.13.129 | 15 / 2 | |
| 0.13.128 | 15 / 2 | |
| 0.13.127 | 15 / 2 | |
| 0.13.126 | 15 / 2 | |
| 0.13.125 | 15 / 2 | |
| 0.13.124 | 15 / 2 | |
| 0.13.123 | 15 / 2 | |
| 0.13.122 | 15 / 2 | |
| 0.13.121 | 15 / 2 | |
| 0.13.120 | 15 / 2 | |
| 0.13.119 | 15 / 2 | |
| 0.13.118 | 15 / 2 | |
| 0.13.117 | 15 / 2 | |
| 0.13.116 | 15 / 2 | |
| 0.13.115 | 15 / 2 | |
| 0.13.114 | 15 / 2 | |
| 0.13.113 | 15 / 2 | |
| 0.13.112 | 15 / 2 | |
| 0.13.111 | 15 / 2 | |
| 0.13.110 | 15 / 2 | |
| 0.13.109 | 15 / 2 | |
| 0.13.108 | 15 / 2 |
v0.13.159
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.158
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.157
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.156
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.155
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.154
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.153
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.152
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.151
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.150
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.149
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.148
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.147
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.146
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.145
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.143
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.142
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.141
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.140
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.139
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.138
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.137
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.136
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.