← Home

@powerlines/plugin-image-compression

npm Repository Homepage

A Powerlines plugin to optimize images used by the project.

100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

sharpsvgopowerlinesstorm-softwarepowerlines-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@stryke/fs AI (phantom-deps): Config-file reference; stable pattern for this package across 390 versions. ai
phantom-deps phantom-dep:@stryke/string-format AI (phantom-deps): Config-file reference; stable pattern for this package across 390 versions. ai
phantom-deps phantom-dep:powerlines AI (phantom-deps): Powerlines is the framework this plugin extends; phantom reference in config is expected for plugin packages. ai
phantom-deps phantom-dep:chalk AI (phantom-deps): Chalk is a legitimate dependency for CLI output; phantom reference in config is expected for monorepo packages. ai
phantom-deps phantom-dep:@stryke/path AI (phantom-deps): Utility dependency referenced in config; phantom reference is expected in monorepo build setup. ai
phantom-deps phantom-dep:@stryke/convert AI (phantom-deps): Utility dependency referenced in config; phantom reference is expected in monorepo build setup. ai
dependencies unvetted-dep:svgo AI (dependencies): svgo is a well-known SVG optimization library; its use is expected and appropriate for an image compression plugin. Not a genuine risk for this package. ai
phantom-deps phantom-dep:jiti AI (phantom-deps): jiti is a well-known TypeScript/ESM runtime loader; phantom dep status reflects config-file usage pattern, not a security concern. ai
phantom-deps phantom-dep:defu AI (phantom-deps): defu is a well-known, legitimate utility package; phantom dep status reflects config-file usage pattern, not a security concern. ai
provenance slsa-provenance AI (provenance): Package consistently published via CI/CD with SLSA provenance attestation; this is a stable characteristic of the Storm Software release pipeline. ai

Versions (showing 100 of 239)

Version Deps Published
0.2.475 10 / 3
0.2.474 10 / 3
0.2.473 10 / 3
0.2.472 10 / 3
0.2.471 10 / 3
0.2.470 10 / 3
0.2.469 10 / 3
0.2.468 10 / 3
0.2.458 10 / 3
0.2.457 10 / 3
0.2.455 10 / 3
0.2.454 10 / 3
0.2.453 10 / 3
0.2.452 10 / 3
0.2.451 10 / 3
0.2.450 10 / 3
0.2.449 10 / 3
0.2.448 10 / 3
0.2.446 10 / 3
0.2.445 10 / 3
0.2.444 10 / 3
0.2.443 10 / 3
0.2.442 10 / 3
0.2.441 10 / 3
0.2.440 10 / 3
0.2.439 10 / 3
0.2.438 10 / 3
0.2.437 10 / 3
0.2.436 10 / 3
0.2.435 10 / 3
0.2.434 10 / 3
0.2.433 10 / 3
0.2.432 10 / 3
0.2.431 10 / 3
0.2.430 10 / 3
0.2.429 10 / 3
0.2.428 10 / 3
0.2.427 10 / 3
0.2.426 10 / 3
0.2.425 10 / 3
0.2.424 10 / 3
0.2.423 10 / 3
0.2.422 10 / 3
0.2.421 10 / 3
0.2.420 10 / 3
0.2.419 10 / 3
0.2.418 10 / 3
0.2.417 10 / 3
0.2.414 10 / 3
0.2.413 10 / 3
0.2.412 10 / 3
0.2.411 10 / 3
0.2.410 10 / 3
0.2.408 10 / 3
0.2.407 10 / 3
0.2.406 10 / 3
0.2.405 10 / 3
0.2.404 10 / 3
0.2.403 10 / 3
0.2.402 10 / 3
0.2.401 10 / 3
0.2.400 10 / 3
0.2.399 10 / 3
0.2.398 10 / 3
0.2.397 10 / 3
0.2.396 10 / 3
0.2.395 10 / 3
0.2.394 10 / 3
0.2.393 10 / 3
0.2.392 10 / 3
0.2.391 10 / 3
0.2.390 10 / 3
0.2.389 10 / 3
0.2.388 10 / 3
0.2.387 10 / 3
0.2.386 10 / 3
0.2.385 10 / 3
0.2.384 10 / 3
0.2.383 10 / 3
0.2.381 10 / 3
0.2.380 10 / 3
0.2.379 10 / 3
0.2.378 10 / 3
0.2.377 10 / 3
0.2.376 10 / 3
0.2.375 10 / 3
0.2.374 10 / 3
0.2.373 10 / 3
0.2.372 10 / 3
0.2.371 10 / 3
0.2.370 10 / 3
0.2.369 10 / 3
0.2.368 10 / 3
0.2.367 10 / 3
0.2.366 10 / 3
0.2.365 10 / 3
0.2.364 10 / 3
0.2.363 10 / 3
0.2.362 10 / 3
0.2.361 10 / 3
Showing 100 of 239 Next page →