@powerlines/plugin-rspack
A package containing a Powerlines plugin to build projects using Webpack.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/powerlines/src/lib/contexts/api-context.cjs | AI (source-diff): Rolldown-minified CJS bundle output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/powerlines/src/lib/contexts/api-context.mjs | AI (source-diff): Rolldown-minified ESM bundle output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/powerlines/src/lib/fs/vfs.cjs | AI (source-diff): Rolldown-minified CJS bundle output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/powerlines/src/internal/helpers/resolve-tsconfig.cjs | AI (source-diff): Rolldown-minified CJS bundle output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/powerlines/schemas/fs.cjs | AI (source-diff): Rolldown-minified CJS bundle output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/powerlines/src/lib/contexts/environment-context.cjs | AI (source-diff): Rolldown-minified CJS bundle output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/powerlines/src/lib/contexts/context.cjs | AI (source-diff): Rolldown-minified CJS bundle output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/powerlines/src/api.cjs | AI (source-diff): Rolldown-minified CJS bundle output; not obfuscation. | ai | |
| phantom-deps | phantom-dep:@stryke/helpers | AI (phantom-deps): Declared as runtime dep; referenced in config files — stable false positive for this package. | ai | |
| provenance | publisher-changed | AI (provenance): stormie-bot is the org's established bot account with 2775 approved packages; transition from GHA to bot account is expected for this publisher. | ai | |
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): Legitimate utility dependency in Powerlines plugin; declared and used via config, not direct imports. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): Legitimate utility dependency in Powerlines plugin; declared and used via config, not direct imports. | ai | |
| phantom-deps | phantom-dep:@rspack/core | AI (phantom-deps): Legitimate build tool dependency in Rspack plugin; declared and used via config, not direct imports. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): Core framework dependency for Powerlines plugin; declared and used via config, not direct imports. | ai | |
| phantom-deps | phantom-dep:@stryke/fs | AI (phantom-deps): Legitimate utility dependency in Powerlines plugin; declared and used via config, not direct imports. | ai | |
| phantom-deps | phantom-dep:jiti | AI (phantom-deps): Legitimate config-time dependency in Powerlines plugin; declared and used via config, not direct imports. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): Legitimate config-time dependency in Powerlines plugin; declared and used via config, not direct imports. | ai | |
| phantom-deps | phantom-dep:@stryke/types | AI (phantom-deps): Legitimate type utility dependency in Powerlines plugin; declared and used via config, not direct imports. | ai | |
| dependencies | unvetted-dep:@powerlines/core | AI (dependencies): First-party dependency within the same @powerlines namespace/ecosystem published by Storm Software. Expected and stable dependency for this package. | ai | |
| dependencies | unvetted-dep:@stryke/path | AI (dependencies): @stryke/path is a utility package from the same Storm Software ecosystem. Consistent presence across versions; no independent risk signals. | ai |
Versions (showing 100 of 310)
| Version | Deps | Published |
|---|---|---|
| 0.5.619 | 7 / 2 | |
| 0.5.618 | 7 / 2 | |
| 0.5.617 | 7 / 2 | |
| 0.5.616 | 7 / 2 | |
| 0.5.615 | 7 / 2 | |
| 0.5.614 | 7 / 2 | |
| 0.5.613 | 7 / 2 | |
| 0.5.612 | 7 / 2 | |
| 0.5.611 | 7 / 2 | |
| 0.5.610 | 7 / 2 | |
| 0.5.609 | 7 / 2 | |
| 0.5.608 | 7 / 2 | |
| 0.5.607 | 7 / 2 | |
| 0.5.606 | 7 / 2 | |
| 0.5.605 | 7 / 2 | |
| 0.5.604 | 7 / 2 | |
| 0.5.603 | 7 / 2 | |
| 0.5.602 | 7 / 2 | |
| 0.5.601 | 7 / 2 | |
| 0.5.599 | 7 / 2 | |
| 0.5.598 | 7 / 2 | |
| 0.5.597 | 7 / 2 | |
| 0.5.596 | 7 / 2 | |
| 0.5.595 | 7 / 2 | |
| 0.5.594 | 7 / 2 | |
| 0.5.593 | 7 / 2 | |
| 0.5.592 | 7 / 2 | |
| 0.5.591 | 7 / 2 | |
| 0.5.590 | 7 / 2 | |
| 0.5.589 | 7 / 2 | |
| 0.5.588 | 7 / 2 | |
| 0.5.587 | 7 / 2 | |
| 0.5.586 | 7 / 2 | |
| 0.5.585 | 7 / 2 | |
| 0.5.584 | 7 / 2 | |
| 0.5.583 | 7 / 2 | |
| 0.5.582 | 7 / 2 | |
| 0.5.581 | 7 / 2 | |
| 0.5.580 | 7 / 2 | |
| 0.5.579 | 7 / 2 | |
| 0.5.578 | 7 / 2 | |
| 0.5.577 | 7 / 2 | |
| 0.5.576 | 7 / 2 | |
| 0.5.575 | 7 / 2 | |
| 0.5.574 | 7 / 2 | |
| 0.5.573 | 7 / 2 | |
| 0.5.572 | 7 / 2 | |
| 0.5.571 | 7 / 2 | |
| 0.5.570 | 7 / 2 | |
| 0.5.569 | 7 / 2 | |
| 0.5.568 | 7 / 2 | |
| 0.5.567 | 7 / 2 | |
| 0.5.566 | 7 / 2 | |
| 0.5.565 | 7 / 2 | |
| 0.5.564 | 7 / 2 | |
| 0.5.563 | 7 / 2 | |
| 0.5.562 | 7 / 2 | |
| 0.5.561 | 7 / 2 | |
| 0.5.560 | 7 / 2 | |
| 0.5.559 | 7 / 2 | |
| 0.5.558 | 7 / 2 | |
| 0.5.557 | 7 / 2 | |
| 0.5.556 | 7 / 2 | |
| 0.5.555 | 7 / 2 | |
| 0.5.554 | 7 / 2 | |
| 0.5.553 | 7 / 2 | |
| 0.5.552 | 7 / 2 | |
| 0.5.551 | 7 / 2 | |
| 0.5.550 | 7 / 2 | |
| 0.5.549 | 7 / 2 | |
| 0.5.548 | 7 / 2 | |
| 0.5.547 | 7 / 2 | |
| 0.5.546 | 7 / 2 | |
| 0.5.545 | 7 / 2 | |
| 0.5.544 | 7 / 2 | |
| 0.5.543 | 7 / 2 | |
| 0.5.542 | 7 / 2 | |
| 0.5.541 | 7 / 2 | |
| 0.5.540 | 7 / 2 | |
| 0.5.539 | 7 / 2 | |
| 0.5.538 | 7 / 2 | |
| 0.5.537 | 7 / 2 | |
| 0.5.536 | 7 / 2 | |
| 0.5.535 | 7 / 2 | |
| 0.5.533 | 7 / 2 | |
| 0.5.532 | 7 / 2 | |
| 0.5.531 | 7 / 2 | |
| 0.5.530 | 7 / 2 | |
| 0.5.529 | 7 / 2 | |
| 0.5.528 | 7 / 2 | |
| 0.5.527 | 7 / 2 | |
| 0.5.526 | 7 / 2 | |
| 0.5.525 | 7 / 2 | |
| 0.5.524 | 7 / 2 | |
| 0.5.523 | 7 / 2 | |
| 0.5.522 | 7 / 2 | |
| 0.5.521 | 7 / 2 | |
| 0.5.520 | 7 / 2 | |
| 0.5.519 | 7 / 2 | |
| 0.5.518 | 7 / 2 |
v0.5.619
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.618
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.617
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.616
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.615
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.614
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.613
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.612
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.611
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.610
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.609
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.608
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.607
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.606
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.605
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.604
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.603
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.602
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.601
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.599
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.598
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.597
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.596
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.595
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.594
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.593
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.592
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.5.591
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.