@powerlines/plugin-cloudflare
A Powerlines plugin that provides integration with Cloudflare services.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/index.cjs | AI (source-diff): esbuild bundled output, not obfuscation; matches package build pipeline. | ai | |
| source-diff | obfuscated-file:dist/index.mjs | AI (source-diff): esbuild bundled output, not obfuscation; matches package build pipeline. | ai | |
| source-diff | obfuscated-file:dist/components/cloudflare-builtin.mjs | AI (source-diff): Bundled dist artifact from rolldown/esbuild build, plain wiring code. | ai | |
| source-diff | obfuscated-file:dist/components/cloudflare-builtin.cjs | AI (source-diff): Bundled dist artifact from rolldown/esbuild build, plain wiring code. | ai | |
| phantom-deps | phantom-dep:@cloudflare/workers-types | AI (phantom-deps): Framework-scoped types loaded by convention; stable for Cloudflare integration. | ai | |
| phantom-deps | phantom-dep:@stryke/types | AI (phantom-deps): Config-referenced type package; stable pattern for this plugin. | ai | |
| phantom-deps | phantom-dep:@powerlines/plugin-env | AI (phantom-deps): Same-org plugin dependency; loaded by convention in plugin system. | ai | |
| phantom-deps | phantom-dep:@powerlines/plugin-unenv | AI (phantom-deps): Same-org plugin dependency; loaded by convention in plugin system. | ai | |
| dependencies | unvetted-dep:@power-plant/alloy-js | AI (dependencies): Sibling org package in the same monorepo ecosystem, low risk. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is a same-org @powerlines package; low risk of supply-chain injection in this context. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): Plugin architecture; powerlines is the framework referenced in config, not direct code imports. | ai | |
| phantom-deps | phantom-dep:@powerlines/plugin-pulumi | AI (phantom-deps): Same-org plugin dependency; referenced in config files as part of plugin composition pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/string-format | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@stryke/hash | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@alloy-js/core | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@stryke/helpers | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@pulumi/cloudflare | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@alloy-js/typescript | AI (phantom-deps): Config-referenced dependency; stable pattern for this monorepo package. | ai | |
| dependencies | unvetted-dep:@pulumi/cloudflare | AI (dependencies): @pulumi/cloudflare is the official Pulumi Cloudflare provider; expected dependency for a Cloudflare integration plugin. | ai | |
| phantom-deps | phantom-dep:@storm-software/config-tools | AI (phantom-deps): First-party config tooling referenced in config files only; not a security concern. | ai | |
| phantom-deps | phantom-dep:@pulumi/pulumi | AI (phantom-deps): Referenced in config files only; minor packaging hygiene issue, not a security concern for this Pulumi-based plugin. | ai | |
| dependencies | unvetted-dep:@powerlines/plugin-env | AI (dependencies): First-party dependency from the same Storm Software/Powerlines organization; expected for this plugin ecosystem. | ai |
Versions (showing 82 of 282)
| Version | Deps | Published |
|---|---|---|
| 0.6.25 | 16 / 7 | |
| 0.6.24 | 16 / 7 | |
| 0.6.23 | 16 / 7 | |
| 0.6.22 | 16 / 7 | |
| 0.6.21 | 16 / 7 | |
| 0.6.20 | 16 / 7 | |
| 0.6.19 | 16 / 7 | |
| 0.6.18 | 16 / 7 | |
| 0.6.17 | 16 / 7 | |
| 0.6.16 | 16 / 7 | |
| 0.6.15 | 16 / 7 | |
| 0.6.14 | 16 / 7 | |
| 0.6.13 | 16 / 7 | |
| 0.6.12 | 16 / 7 | |
| 0.6.11 | 16 / 7 | |
| 0.6.10 | 16 / 7 | |
| 0.6.9 | 16 / 7 | |
| 0.6.8 | 16 / 7 | |
| 0.6.7 | 16 / 7 | |
| 0.6.6 | 16 / 7 | |
| 0.6.5 | 16 / 7 | |
| 0.6.4 | 16 / 7 | |
| 0.6.3 | 16 / 7 | |
| 0.6.2 | 16 / 7 | |
| 0.6.1 | 16 / 7 | |
| 0.6.0 | 16 / 7 | |
| 0.5.20 | 17 / 5 | |
| 0.5.19 | 17 / 5 | |
| 0.5.18 | 17 / 5 | |
| 0.5.17 | 17 / 5 | |
| 0.5.16 | 17 / 5 | |
| 0.5.15 | 17 / 5 | |
| 0.5.14 | 17 / 5 | |
| 0.5.13 | 17 / 5 | |
| 0.5.12 | 17 / 5 | |
| 0.5.11 | 17 / 5 | |
| 0.5.10 | 17 / 5 | |
| 0.5.9 | 17 / 5 | |
| 0.5.8 | 17 / 5 | |
| 0.5.7 | 17 / 5 | |
| 0.5.6 | 17 / 5 | |
| 0.5.4 | 17 / 5 | |
| 0.5.3 | 17 / 5 | |
| 0.5.2 | 17 / 5 | |
| 0.5.1 | 17 / 5 | |
| 0.5.0 | 17 / 5 | |
| 0.4.2 | 17 / 5 | |
| 0.3.4 | 14 / 4 | |
| 0.3.3 | 14 / 4 | |
| 0.3.2 | 14 / 4 | |
| 0.3.1 | 14 / 4 | |
| 0.3.0 | 14 / 4 | |
| 0.2.31 | 14 / 4 | |
| 0.2.30 | 14 / 4 | |
| 0.2.29 | 14 / 4 | |
| 0.2.28 | 14 / 4 | |
| 0.2.27 | 14 / 4 | |
| 0.2.26 | 14 / 4 | |
| 0.2.25 | 14 / 4 | |
| 0.2.24 | 14 / 4 | |
| 0.2.23 | 14 / 4 | |
| 0.2.22 | 14 / 4 | |
| 0.2.21 | 14 / 4 | |
| 0.2.20 | 11 / 4 | |
| 0.2.19 | 11 / 4 | |
| 0.2.18 | 11 / 4 | |
| 0.2.17 | 11 / 4 | |
| 0.2.16 | 11 / 4 | |
| 0.2.15 | 11 / 4 | |
| 0.2.13 | 11 / 4 | |
| 0.2.12 | 11 / 4 | |
| 0.2.11 | 11 / 4 | |
| 0.2.10 | 11 / 4 | |
| 0.2.9 | 11 / 4 | |
| 0.2.8 | 11 / 4 | |
| 0.2.7 | 11 / 4 | |
| 0.2.6 | 11 / 4 | |
| 0.2.5 | 11 / 4 | |
| 0.2.4 | 11 / 4 | |
| 0.2.2 | 11 / 4 | |
| 0.2.1 | 11 / 4 | |
| 0.2.0 | 11 / 4 |
v0.6.25
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.24
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.4.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.31
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.30
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.29
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.27
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.24
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.23
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.