← Home

@powerlines/plugin-rolldown

npm Repository Homepage

A package containing a Powerlines plugin to assist in developing other Powerlines plugins.

100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

rolldownpowerlinesstorm-softwarepowerlines-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@powerlines/unplugin AI (dependencies): Same org (@powerlines/storm-software); consistent with the package's own namespace and publishing pattern. ai
source-diff obfuscated-file:dist/unplugin-CLsmVZMo.cjs AI (source-diff): Standard minified bundle output for a build-tool plugin; no obfuscation or malicious payload present. ai
source-diff obfuscated-file:dist/index.mjs AI (source-diff): Standard minified bundle output for a build-tool plugin; no obfuscation or malicious payload present. ai
source-diff obfuscated-file:dist/unplugin-Rgj8lLxv.mjs AI (source-diff): Standard minified bundle output for a build-tool plugin; no obfuscation or malicious payload present. ai
phantom-deps phantom-dep:@stryke/helpers AI (phantom-deps): Internal org dep used in config files; stable false positive for this package. ai
phantom-deps phantom-dep:glob AI (phantom-deps): Declared as a runtime dep for config-level use; stable false positive for this package. ai
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/api-context.mjs AI (source-diff): Minified ESM bundle output from rolldown; expected for a build tool plugin shipping compiled dist/ artifacts. ai
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/api-context.cjs AI (source-diff): Minified CJS bundle output from rolldown; this is a rolldown plugin that ships bundled dist/ files. No malicious patterns in samples. ai
provenance publisher-changed AI (provenance): Transition from stormie-bot to GitHub Actions is an upgrade in CI/CD hygiene; SLSA provenance attestation confirms verified pipeline publishing. ai
source-diff obfuscated-file:dist/powerlines/src/internal/helpers/resolve-tsconfig.cjs AI (source-diff): Minified rolldown bundle output; TypeScript config resolution helpers. No malicious patterns. ai
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/context.cjs AI (source-diff): Minified rolldown bundle output; standard plugin context implementation. No malicious patterns. ai
source-diff obfuscated-file:dist/powerlines/src/api.cjs AI (source-diff): Minified rolldown/rollup bundle output; code is readable JS with standard npm imports. No malicious patterns. SLSA provenance confirms CI/CD build. ai
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/environment-context.cjs AI (source-diff): Minified rolldown bundle output; standard plugin environment context. No malicious patterns. ai
source-diff obfuscated-file:dist/powerlines/schemas/fs.cjs AI (source-diff): Minified rolldown bundle output; Cap'n Proto schema definitions. No malicious patterns. ai
source-diff obfuscated-file:dist/powerlines/src/lib/fs/vfs.cjs AI (source-diff): Minified rolldown bundle output; virtual filesystem implementation. No malicious patterns. ai
source-diff obfuscated-file:dist/powerlines/src/lib/build/rolldown.cjs AI (source-diff): Minified rolldown bundle output; build configuration helpers. No malicious patterns. ai
phantom-deps phantom-dep:@stryke/convert AI (phantom-deps): Utility dependency used in build configuration; phantom pattern is stable for this package. ai
phantom-deps phantom-dep:defu AI (phantom-deps): Legitimate build tool dependency used in plugin configuration; phantom pattern is expected for this package type. ai
phantom-deps phantom-dep:rolldown AI (phantom-deps): Core dependency for Rolldown plugin; referenced in build config rather than direct imports. ai
phantom-deps phantom-dep:unplugin AI (phantom-deps): Plugin framework dependency; used indirectly through plugin configuration. ai
phantom-deps phantom-dep:powerlines AI (phantom-deps): Parent framework dependency; referenced in plugin context rather than direct imports. ai
phantom-deps phantom-dep:@stryke/path AI (phantom-deps): Utility dependency used in build configuration; phantom pattern is stable for this package. ai
phantom-deps phantom-dep:@stryke/type-checks AI (phantom-deps): Utility dependency used in build configuration; phantom pattern is stable for this package. ai
dependencies unvetted-dep:@stryke/fs AI (dependencies): Same-org sibling package from Storm Software (@stryke scope); not a third-party unknown dependency. ai
phantom-deps phantom-dep:@powerlines/plugin-babel AI (phantom-deps): Same-org sibling package; indirect usage is expected in this plugin ecosystem. ai
phantom-deps phantom-dep:@stryke/types AI (phantom-deps): Same-org sibling package; type-only usage not directly imported is expected for type packages. ai
phantom-deps phantom-dep:@stryke/fs AI (phantom-deps): Same-org sibling package; indirect usage via config files is expected in this plugin ecosystem. ai
phantom-deps phantom-dep:jiti AI (phantom-deps): jiti is declared as a runtime dependency and used in config files; indirect usage pattern is normal for plugin ecosystems. ai
dependencies unvetted-dep:@powerlines/plugin-rollup AI (dependencies): Same-org sibling package from Storm Software (@powerlines scope); not a third-party unknown dependency. ai
dependencies unvetted-dep:@powerlines/plugin-babel AI (dependencies): Same-org sibling package from Storm Software (@powerlines scope); not a third-party unknown dependency. ai
dependencies unvetted-dep:@stryke/type-checks AI (dependencies): Same-org sibling package from Storm Software (@stryke scope); not a third-party unknown dependency. ai
dependencies unvetted-dep:@powerlines/core AI (dependencies): Same-org sibling package from Storm Software (@powerlines scope); not a third-party unknown dependency. ai
dependencies unvetted-dep:@stryke/convert AI (dependencies): Same-org sibling package from Storm Software (@stryke scope); not a third-party unknown dependency. ai
dependencies unvetted-dep:@stryke/types AI (dependencies): Same-org sibling package from Storm Software (@stryke scope); not a third-party unknown dependency. ai
dependencies unvetted-dep:@stryke/path AI (dependencies): Same-org sibling package from Storm Software (@stryke scope); not a third-party unknown dependency. ai

Versions (showing 100 of 491)

Version Deps Published
0.7.624 13 / 2
0.7.623 13 / 2
0.7.622 13 / 2
0.7.621 13 / 2
0.7.620 13 / 2
0.7.619 13 / 2
0.7.618 13 / 2
0.7.617 13 / 2
0.7.616 13 / 2
0.7.615 13 / 2
0.7.614 13 / 2
0.7.613 13 / 2
0.7.612 13 / 2
0.7.611 13 / 2
0.7.610 13 / 2
0.7.609 13 / 2
0.7.608 13 / 2
0.7.607 13 / 2
0.7.606 13 / 2
0.7.604 13 / 2
0.7.603 13 / 2
0.7.602 13 / 2
0.7.601 13 / 2
0.7.600 13 / 2
0.7.599 13 / 2
0.7.598 13 / 2
0.7.597 13 / 2
0.7.596 13 / 2
0.7.595 13 / 2
0.7.594 13 / 2
0.7.593 13 / 2
0.7.592 13 / 2
0.7.591 13 / 2
0.7.590 13 / 2
0.7.589 13 / 2
0.7.588 13 / 2
0.7.587 13 / 2
0.7.586 13 / 2
0.7.585 13 / 2
0.7.584 13 / 2
0.7.583 13 / 2
0.7.582 13 / 2
0.7.581 13 / 2
0.7.580 13 / 2
0.7.579 13 / 2
0.7.578 13 / 2
0.7.577 13 / 2
0.7.576 13 / 2
0.7.575 13 / 2
0.7.574 13 / 2
0.7.573 13 / 2
0.7.572 13 / 2
0.7.571 13 / 2
0.7.570 13 / 2
0.7.569 13 / 2
0.7.568 13 / 2
0.7.567 13 / 2
0.7.566 13 / 2
0.7.565 13 / 2
0.7.564 13 / 2
0.7.563 13 / 2
0.7.562 13 / 2
0.7.561 13 / 2
0.7.560 13 / 2
0.7.559 13 / 2
0.7.558 13 / 2
0.7.557 13 / 2
0.7.556 13 / 2
0.7.555 13 / 2
0.7.554 13 / 2
0.7.553 13 / 2
0.7.552 13 / 2
0.7.551 13 / 2
0.7.550 13 / 2
0.7.549 13 / 2
0.7.548 13 / 2
0.7.547 13 / 2
0.7.546 13 / 2
0.7.545 13 / 2
0.7.544 13 / 2
0.7.543 13 / 2
0.7.542 13 / 2
0.7.541 13 / 2
0.7.540 13 / 2
0.7.538 13 / 2
0.7.537 13 / 2
0.7.536 13 / 2
0.7.535 13 / 2
0.7.534 13 / 2
0.7.533 13 / 2
0.7.532 13 / 2
0.7.531 13 / 2
0.7.530 13 / 2
0.7.529 13 / 2
0.7.528 13 / 2
0.7.527 13 / 2
0.7.526 13 / 2
0.7.525 13 / 2
0.7.524 13 / 2
0.7.523 13 / 2
Showing 100 of 491 Next page →

v0.7.624

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.623

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.622

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.621

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.620

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.619

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.618

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.617

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.616

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.615

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.614

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.613

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.612

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.611

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.610

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.609

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.608

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.607

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.606

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.604

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.603

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.602

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.601

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.600

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.599

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.598

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.597

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.596

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.