@powerlines/plugin-style-dictionary
A Powerlines plugin to generate project code with Style Dictionary.
100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
stormie-botsullivanpj
Keywords
style-dictionarypowerlinesstorm-softwarepowerlines-plugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@power-plant/style-dictionary | AI (dependencies): Same-org monorepo sibling dependency, not third-party. | ai | |
| phantom-deps | phantom-dep:@power-plant/core | AI (phantom-deps): Likely bundled dist build; package ships compiled output only. | ai | |
| dependencies | unvetted-dep:@powerlines/plugin-power-plant | AI (dependencies): Same-org monorepo sibling dependency, not third-party. | ai | |
| dependencies | unvetted-dep:@power-plant/core | AI (dependencies): Same-org monorepo sibling dependency, not third-party. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps are from the same Storm Software org; consistent with internal refactoring across this package family. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large file counts reflect rolldown bundling virtual modules into dist. Expected pattern for this Storm Software package family. | ai | |
| provenance | publisher-changed | AI (provenance): Storm Software migrated publishing to GitHub Actions CI/CD with SLSA provenance attestation. This is a legitimate automation transition, not a compromise. | ai | |
| source-diff | obfuscated-file:dist/index.mjs | AI (source-diff): dist/index.mjs is standard minified ESM bundle output from esbuild, not obfuscation. SLSA provenance confirms CI/CD build integrity. Stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/index.cjs | AI (source-diff): dist/index.cjs is a standard minified CJS bundle output. Code is readable and benign. Long lines are from bundling, not obfuscation. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): Phantom dependency is expected; defu is a legitimate utility used in config processing for this plugin. | ai | |
| phantom-deps | phantom-dep:@stryke/types | AI (phantom-deps): Type utilities used indirectly; phantom dependency is expected in this plugin context. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): Core plugin dependency; used through plugin architecture rather than direct imports. | ai | |
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): Type checking utilities used indirectly; expected phantom dependency pattern. | ai | |
| phantom-deps | phantom-dep:style-dictionary | AI (phantom-deps): Core dependency for this style-dictionary plugin; used through plugin interface. | ai | |
| phantom-deps | phantom-dep:jiti | AI (phantom-deps): jiti is declared as a runtime dependency and used in config files; phantom-dep flag is a false positive for this config-tooling pattern. | ai | |
| provenance | slsa-provenance | AI (provenance): Package is consistently published via CI/CD with Sigstore SLSA attestation; this is a stable positive signal for the entire package ecosystem. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): @stryke/path is a sibling ecosystem package declared as a dependency and referenced in config; phantom-dep flag is a false positive here. | ai |
Versions (showing 100 of 597)
| Version | Deps | Published |
|---|---|---|
| 0.3.405 | 8 / 2 | |
| 0.3.404 | 8 / 2 | |
| 0.3.403 | 8 / 2 | |
| 0.3.402 | 8 / 2 | |
| 0.3.401 | 8 / 2 | |
| 0.3.400 | 8 / 2 | |
| 0.3.398 | 8 / 2 | |
| 0.3.397 | 8 / 2 | |
| 0.3.396 | 8 / 2 | |
| 0.3.395 | 8 / 2 | |
| 0.3.394 | 8 / 2 | |
| 0.3.393 | 8 / 2 | |
| 0.3.392 | 8 / 2 | |
| 0.3.391 | 8 / 2 | |
| 0.3.390 | 8 / 2 | |
| 0.3.389 | 8 / 2 | |
| 0.3.388 | 8 / 2 | |
| 0.3.387 | 8 / 2 | |
| 0.3.386 | 8 / 2 | |
| 0.3.385 | 8 / 2 | |
| 0.3.384 | 8 / 2 | |
| 0.3.383 | 8 / 2 | |
| 0.3.381 | 8 / 2 | |
| 0.3.380 | 8 / 2 | |
| 0.3.379 | 8 / 2 | |
| 0.3.378 | 7 / 2 | |
| 0.3.377 | 7 / 2 | |
| 0.3.376 | 7 / 2 | |
| 0.3.375 | 7 / 2 | |
| 0.3.374 | 7 / 2 | |
| 0.3.373 | 9 / 2 | |
| 0.3.372 | 9 / 2 | |
| 0.3.371 | 9 / 2 | |
| 0.3.370 | 9 / 2 | |
| 0.3.369 | 9 / 2 | |
| 0.3.366 | 9 / 2 | |
| 0.3.365 | 9 / 2 | |
| 0.3.364 | 9 / 2 | |
| 0.3.363 | 9 / 2 | |
| 0.3.362 | 9 / 2 | |
| 0.3.360 | 9 / 2 | |
| 0.3.359 | 9 / 2 | |
| 0.3.358 | 9 / 2 | |
| 0.3.357 | 9 / 2 | |
| 0.3.356 | 9 / 2 | |
| 0.3.355 | 9 / 2 | |
| 0.3.354 | 9 / 2 | |
| 0.3.353 | 9 / 2 | |
| 0.3.352 | 9 / 2 | |
| 0.3.351 | 9 / 2 | |
| 0.3.350 | 9 / 2 | |
| 0.3.349 | 9 / 2 | |
| 0.3.348 | 9 / 2 | |
| 0.3.347 | 9 / 2 | |
| 0.3.346 | 9 / 2 | |
| 0.3.345 | 9 / 2 | |
| 0.3.344 | 9 / 2 | |
| 0.3.343 | 9 / 2 | |
| 0.3.342 | 9 / 2 | |
| 0.3.341 | 9 / 2 | |
| 0.3.340 | 9 / 2 | |
| 0.3.339 | 9 / 2 | |
| 0.3.338 | 9 / 2 | |
| 0.3.337 | 9 / 2 | |
| 0.3.336 | 9 / 2 | |
| 0.3.335 | 9 / 2 | |
| 0.3.333 | 9 / 2 | |
| 0.3.332 | 9 / 2 | |
| 0.3.331 | 9 / 2 | |
| 0.3.330 | 9 / 2 | |
| 0.3.329 | 9 / 2 | |
| 0.3.328 | 9 / 2 | |
| 0.3.327 | 9 / 2 | |
| 0.3.326 | 9 / 2 | |
| 0.3.325 | 9 / 2 | |
| 0.3.324 | 9 / 2 | |
| 0.3.323 | 9 / 2 | |
| 0.3.322 | 9 / 2 | |
| 0.3.321 | 9 / 2 | |
| 0.3.320 | 9 / 2 | |
| 0.3.319 | 9 / 2 | |
| 0.3.318 | 9 / 2 | |
| 0.3.317 | 9 / 2 | |
| 0.3.316 | 9 / 2 | |
| 0.3.315 | 9 / 2 | |
| 0.3.314 | 9 / 2 | |
| 0.3.313 | 9 / 2 | |
| 0.3.312 | 9 / 2 | |
| 0.3.311 | 9 / 2 | |
| 0.3.310 | 9 / 2 | |
| 0.3.309 | 9 / 2 | |
| 0.3.307 | 9 / 2 | |
| 0.3.306 | 9 / 2 | |
| 0.3.305 | 9 / 2 | |
| 0.3.304 | 9 / 2 | |
| 0.3.303 | 9 / 2 | |
| 0.3.302 | 9 / 2 | |
| 0.3.301 | 9 / 2 | |
| 0.3.300 | 9 / 2 | |
| 0.3.299 | 9 / 2 |
Showing 100 of 597
Next page →