@powerlines/plugin-open-feature
A package containing a Powerlines plugin for managing Open Feature feature flags at runtime.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed from one CI bot (stormie-bot) to another (GitHub Actions). SLSA provenance confirms legitimate build origin from the expected repo. | ai | |
| phantom-deps | phantom-dep:@openfeature/core | AI (phantom-deps): Transitive/config dependency of the OpenFeature plugin; referenced in config files per the finding. | ai | |
| phantom-deps | phantom-dep:@stryke/env | AI (phantom-deps): Sibling @stryke/* org package; phantom detection is a false positive for this plugin's indirect usage pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/json | AI (phantom-deps): Sibling @stryke/* org package; phantom detection is a false positive for this plugin's indirect usage pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/types | AI (phantom-deps): Sibling @stryke/* org package; phantom detection is a false positive for this plugin's indirect usage pattern. | ai | |
| phantom-deps | phantom-dep:@alloy-js/json | AI (phantom-deps): Declared dep used indirectly in this plugin framework; phantom detection is a false positive. | ai | |
| phantom-deps | phantom-dep:@stryke/convert | AI (phantom-deps): Sibling @stryke/* org package; phantom detection is a false positive for this plugin's indirect usage pattern. | ai | |
| phantom-deps | phantom-dep:c12 | AI (phantom-deps): c12 is a config-loading utility declared as a dep and referenced in config files; phantom detection is a false positive for this plugin package's architecture. | ai | |
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): Sibling @stryke/* org package; phantom detection is a false positive for this plugin's indirect usage pattern. | ai | |
| phantom-deps | phantom-dep:@stryke/string-format | AI (phantom-deps): Sibling @stryke/* org package; phantom detection is a false positive for this plugin's indirect usage pattern. | ai | |
| phantom-deps | phantom-dep:@powerlines/plugin-plugin | AI (phantom-deps): Same-org sibling package; phantom detection is a false positive for this plugin framework's architecture. | ai | |
| phantom-deps | phantom-dep:@storm-software/config-tools | AI (phantom-deps): Storm Software org config package used indirectly; phantom detection is a false positive for this ecosystem's build pattern. | ai | |
| dependencies | unvetted-dep:@powerlines/plugin-alloy | AI (dependencies): Same-org sibling package from Storm Software / Powerlines ecosystem with established publisher track record and SLSA provenance. | ai | |
| phantom-deps | phantom-dep:@alloy-js/markdown | AI (phantom-deps): Declared dep used indirectly in this plugin framework; phantom detection is a false positive. | ai | |
| phantom-deps | phantom-dep:@stryke/fs | AI (phantom-deps): Sibling @stryke/* org package; phantom detection is a false positive for this plugin's indirect usage pattern. | ai |
Versions (showing 100 of 198)
| Version | Deps | Published |
|---|---|---|
| 0.1.225 | 22 / 3 | |
| 0.1.224 | 22 / 3 | |
| 0.1.223 | 22 / 3 | |
| 0.1.222 | 22 / 3 | |
| 0.1.221 | 22 / 3 | |
| 0.1.220 | 22 / 3 | |
| 0.1.219 | 22 / 3 | |
| 0.1.218 | 22 / 3 | |
| 0.1.217 | 22 / 3 | |
| 0.1.216 | 22 / 3 | |
| 0.1.215 | 22 / 3 | |
| 0.1.214 | 22 / 3 | |
| 0.1.213 | 22 / 3 | |
| 0.1.212 | 22 / 3 | |
| 0.1.211 | 22 / 3 | |
| 0.1.210 | 22 / 3 | |
| 0.1.209 | 22 / 3 | |
| 0.1.208 | 22 / 3 | |
| 0.1.207 | 22 / 3 | |
| 0.1.206 | 22 / 3 | |
| 0.1.205 | 22 / 3 | |
| 0.1.204 | 22 / 3 | |
| 0.1.203 | 22 / 3 | |
| 0.1.202 | 22 / 3 | |
| 0.1.201 | 22 / 3 | |
| 0.1.200 | 22 / 3 | |
| 0.1.199 | 22 / 3 | |
| 0.1.198 | 22 / 3 | |
| 0.1.197 | 22 / 3 | |
| 0.1.185 | 22 / 3 | |
| 0.1.184 | 22 / 3 | |
| 0.1.183 | 22 / 3 | |
| 0.1.182 | 22 / 3 | |
| 0.1.181 | 22 / 3 | |
| 0.1.180 | 22 / 3 | |
| 0.1.179 | 22 / 3 | |
| 0.1.177 | 22 / 3 | |
| 0.1.176 | 22 / 3 | |
| 0.1.175 | 22 / 3 | |
| 0.1.174 | 22 / 3 | |
| 0.1.173 | 22 / 3 | |
| 0.1.172 | 22 / 3 | |
| 0.1.171 | 22 / 3 | |
| 0.1.170 | 22 / 3 | |
| 0.1.169 | 22 / 3 | |
| 0.1.168 | 22 / 3 | |
| 0.1.167 | 22 / 3 | |
| 0.1.166 | 22 / 3 | |
| 0.1.165 | 22 / 3 | |
| 0.1.164 | 22 / 3 | |
| 0.1.163 | 22 / 3 | |
| 0.1.162 | 22 / 3 | |
| 0.1.161 | 22 / 3 | |
| 0.1.160 | 22 / 3 | |
| 0.1.159 | 22 / 3 | |
| 0.1.158 | 22 / 3 | |
| 0.1.157 | 22 / 3 | |
| 0.1.156 | 22 / 3 | |
| 0.1.155 | 22 / 3 | |
| 0.1.154 | 22 / 3 | |
| 0.1.153 | 22 / 3 | |
| 0.1.152 | 22 / 3 | |
| 0.1.151 | 22 / 3 | |
| 0.1.150 | 22 / 3 | |
| 0.1.149 | 22 / 3 | |
| 0.1.148 | 22 / 3 | |
| 0.1.147 | 22 / 3 | |
| 0.1.138 | 22 / 3 | |
| 0.1.137 | 22 / 3 | |
| 0.1.135 | 22 / 3 | |
| 0.1.134 | 22 / 3 | |
| 0.1.133 | 22 / 3 | |
| 0.1.132 | 22 / 3 | |
| 0.1.131 | 22 / 3 | |
| 0.1.130 | 22 / 3 | |
| 0.1.129 | 22 / 3 | |
| 0.1.128 | 22 / 3 | |
| 0.1.127 | 22 / 3 | |
| 0.1.126 | 22 / 3 | |
| 0.1.124 | 22 / 3 | |
| 0.1.123 | 22 / 3 | |
| 0.1.122 | 22 / 3 | |
| 0.1.121 | 22 / 3 | |
| 0.1.120 | 22 / 3 | |
| 0.1.118 | 22 / 3 | |
| 0.1.117 | 22 / 3 | |
| 0.1.116 | 22 / 3 | |
| 0.1.115 | 22 / 3 | |
| 0.1.114 | 22 / 3 | |
| 0.1.113 | 22 / 3 | |
| 0.1.112 | 22 / 3 | |
| 0.1.111 | 22 / 3 | |
| 0.1.110 | 22 / 3 | |
| 0.1.109 | 22 / 3 | |
| 0.1.108 | 22 / 3 | |
| 0.1.107 | 22 / 3 | |
| 0.1.106 | 22 / 3 | |
| 0.1.105 | 22 / 3 | |
| 0.1.104 | 22 / 3 | |
| 0.1.103 | 22 / 3 |
v0.1.225
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.224
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.223
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.222
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.221
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.220
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.219
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.218
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.217
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.216
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.215
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.214
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.213
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.212
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.211
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.210
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.209
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.208
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.207
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.206
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.205
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.204
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.203
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.202
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.201
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.200
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.199
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.198
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.197
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.185
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.184
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.183
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.182
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.181
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.180
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.179
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.177
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.176
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.175
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.174
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.173
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.172
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.171
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.170
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.169
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.168
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.167
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.166
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.165
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.164
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.163
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.162
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.161
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.160
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.159
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.158
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.157
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.156
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.155
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.154
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.153
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.152
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.151
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.150
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.149
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.148
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.147
2 findingsPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
[Accepted risk] This version was published by a different npm account than previous versions on 2026-05-21. This could indicate a legitimate maintainer transition or an account compromise.
v0.1.138
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.137
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.135
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.134
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.133
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.132
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.131
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.130
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.129
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.128
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.127
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.126
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.124
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.123
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.122
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.121
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.120
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.118
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.117
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.116
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.115
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.114
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.113
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.112
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.111
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.110
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.109
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.108
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.107
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.106
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.105
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.104
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.103
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.