← Home

@powerlines/plugin-deepkit

npm Repository Homepage

A package containing a Powerlines plugin to assist in developing other Powerlines plugins.

100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

deepkitpowerlinespowerlines-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@power-plant/schema AI (dependencies): Sibling-ecosystem scoped package from same trusted publisher; no malicious behavior evidenced. ai
publish-pattern new-deps-added AI (publish-pattern): Routine dependency swap within Storm Software's own package family. ai
phantom-deps phantom-dep:@storm-software/config-tools AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:@stryke/type-checks AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:@stryke/types AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:@stryke/path AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:@stryke/fs AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:unplugin AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:chalk AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:jiti AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
phantom-deps phantom-dep:defu AI (phantom-deps): Config-referenced dependency; stable pattern for this plugin package. ai
source-diff obfuscated-file:dist/index.mjs AI (source-diff): Minified build output from CI/CD pipeline with SLSA provenance. Code is readable path utilities + plugin wiring, not obfuscated. Stable pattern for this package. ai
source-diff obfuscated-file:dist/index.cjs AI (source-diff): Minified build output from CI/CD pipeline with SLSA provenance. Code is readable path utilities + plugin wiring, not obfuscated. Stable pattern for this package. ai
phantom-deps phantom-dep:@powerlines/deepkit AI (phantom-deps): Same org scope sibling dependency in a monorepo plugin; referenced in config files, not a direct import risk. ai
phantom-deps phantom-dep:powerlines AI (phantom-deps): Monorepo plugin package; powerlines is a peer/config-level dependency not directly imported in plugin code. Stable pattern for this package. ai
provenance publisher-changed AI (provenance): Publisher changed from stormie-bot to GitHub Actions — a legitimate CI/CD migration. SLSA provenance attestation confirms builds are from the verified GitHub Actions environment. ai
phantom-deps phantom-dep:@powerlines/plugin-tsc AI (phantom-deps): Same org scope sibling dependency in a monorepo plugin; referenced in config files, not a direct import risk. ai
dependencies unvetted-dep:@powerlines/deepkit AI (dependencies): First-party Storm Software (@powerlines scope) sibling package; consistent with the publisher's monorepo ecosystem. ai
dependencies unvetted-dep:@stryke/json AI (dependencies): First-party Storm Software (@stryke scope) package; consistent with the publisher's ecosystem pattern. ai
dependencies unvetted-dep:powerlines AI (dependencies): First-party Storm Software monorepo package; consistent with the publisher's ecosystem pattern across all versions. ai
phantom-deps phantom-dep:@stryke/json AI (phantom-deps): Phantom dep pattern is a packaging artifact of the Storm Software monorepo build; not a security concern. ai
phantom-deps phantom-dep:typescript AI (phantom-deps): TypeScript declared as dep but used only in config files; packaging hygiene issue, not a security concern for this package. ai
dependencies unvetted-dep:@powerlines/plugin-tsc AI (dependencies): First-party Storm Software (@powerlines scope) sibling package; consistent with the publisher's monorepo ecosystem. ai
provenance slsa-provenance AI (provenance): Storm Software consistently publishes with SLSA provenance via CI/CD; this is a stable positive signal for all versions of this package. ai

Versions (showing 100 of 630)

Version Deps Published
0.11.505 6 / 2
0.11.504 6 / 2
0.11.503 6 / 2
0.11.502 6 / 2
0.11.501 6 / 2
0.11.500 6 / 2
0.11.499 6 / 2
0.11.498 6 / 2
0.11.497 6 / 2
0.11.496 6 / 2
0.11.495 6 / 2
0.11.494 6 / 2
0.11.493 6 / 2
0.11.492 6 / 2
0.11.490 6 / 2
0.11.489 6 / 2
0.11.488 6 / 2
0.11.487 6 / 2
0.11.486 6 / 2
0.11.485 6 / 2
0.11.484 6 / 2
0.11.483 6 / 2
0.11.482 6 / 2
0.11.481 6 / 2
0.11.480 6 / 2
0.11.479 6 / 2
0.11.478 6 / 2
0.11.477 6 / 2
0.11.476 6 / 2
0.11.475 6 / 2
0.11.474 6 / 2
0.11.473 6 / 2
0.11.472 6 / 2
0.11.471 6 / 2
0.11.470 6 / 2
0.11.469 6 / 2
0.11.468 6 / 2
0.11.467 6 / 2
0.11.466 6 / 2
0.11.465 6 / 2
0.11.464 6 / 2
0.11.463 6 / 2
0.11.462 6 / 2
0.11.461 6 / 2
0.11.460 6 / 2
0.11.459 6 / 2
0.11.458 6 / 2
0.11.457 6 / 2
0.11.456 6 / 2
0.11.455 6 / 2
0.11.454 6 / 2
0.11.453 6 / 2
0.11.452 6 / 2
0.11.451 6 / 2
0.11.450 6 / 2
0.11.449 6 / 2
0.11.448 6 / 2
0.11.447 6 / 2
0.11.446 6 / 2
0.11.445 6 / 2
0.11.444 6 / 2
0.11.443 6 / 2
0.11.442 6 / 2
0.11.441 6 / 2
0.11.440 6 / 2
0.11.439 6 / 2
0.11.438 6 / 2
0.11.437 6 / 2
0.11.436 6 / 2
0.11.435 6 / 2
0.11.434 6 / 2
0.11.433 6 / 2
0.11.432 6 / 2
0.11.431 6 / 2
0.11.430 6 / 2
0.11.429 6 / 2
0.11.428 6 / 2
0.11.427 6 / 2
0.11.426 6 / 2
0.11.424 6 / 2
0.11.423 6 / 2
0.11.422 6 / 2
0.11.421 6 / 2
0.11.420 6 / 2
0.11.419 6 / 2
0.11.418 6 / 2
0.11.417 6 / 2
0.11.416 6 / 2
0.11.415 6 / 2
0.11.414 6 / 2
0.11.413 6 / 2
0.11.412 6 / 2
0.11.411 6 / 2
0.11.410 6 / 2
0.11.409 6 / 2
0.11.408 6 / 2
0.11.407 6 / 2
0.11.406 6 / 2
0.11.405 6 / 2
0.11.404 6 / 2
Showing 100 of 630 Next page →

v0.11.505

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.504

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.503

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.502

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.501

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.500

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.499

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.498

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.497

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.496

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.495

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.494

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.493

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.492

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.490

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.489

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.488

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.487

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.486

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.485

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.484

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.483

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.482

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.