@powerlines/plugin-stylelint
A package containing a Powerlines plugin for running Stylelint on the codebase.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed from stormie-bot to GitHub Actions, consistent with a CI/CD pipeline migration. SLSA provenance attestation confirms integrity of the publishing pipeline. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): Declared dependency referenced in config; expected for plugin packages that configure tools rather than directly import them. | ai | |
| phantom-deps | phantom-dep:stylelint | AI (phantom-deps): Declared dependency referenced in config; expected for stylelint plugin package. | ai | |
| phantom-deps | phantom-dep:@stryke/fs | AI (phantom-deps): Declared dependency referenced in config; expected for plugin packages that configure tools rather than directly import them. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): Declared dependency referenced in config; expected for Powerlines plugin package. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): Declared dependency referenced in config; expected for plugin packages that configure tools rather than directly import them. | ai | |
| dependencies | unvetted-dep:@stryke/fs | AI (dependencies): @stryke/fs is a Storm Software internal utility package from the same monorepo/org; expected dependency for this ecosystem. | ai | |
| dependencies | unvetted-dep:@stryke/path | AI (dependencies): @stryke/path is a Storm Software internal utility package from the same monorepo/org; expected dependency for this ecosystem. | ai | |
| dependencies | unvetted-dep:powerlines | AI (dependencies): powerlines is the core package of this monorepo; expected dependency for a powerlines plugin. | ai | |
| dependencies | unvetted-dep:@storm-software/config-tools | AI (dependencies): @storm-software/config-tools is a Storm Software internal package; expected dependency for this ecosystem. | ai | |
| phantom-deps | phantom-dep:@storm-software/config-tools | AI (phantom-deps): Declared as a dependency and referenced in config files; phantom-dep finding reflects a code organization pattern in the Storm Software ecosystem, not a security risk. | ai |
Versions (showing 51 of 567)
| Version | Deps | Published |
|---|---|---|
| 0.1.591 | 6 / 2 | |
| 0.1.590 | 6 / 2 | |
| 0.1.589 | 6 / 2 | |
| 0.1.588 | 6 / 2 | |
| 0.1.587 | 6 / 2 | |
| 0.1.586 | 6 / 2 | |
| 0.1.585 | 6 / 2 | |
| 0.1.584 | 6 / 2 | |
| 0.1.583 | 6 / 2 | |
| 0.1.582 | 6 / 2 | |
| 0.1.581 | 6 / 2 | |
| 0.1.580 | 6 / 2 | |
| 0.1.579 | 6 / 2 | |
| 0.1.578 | 6 / 2 | |
| 0.1.577 | 6 / 2 | |
| 0.1.576 | 6 / 2 | |
| 0.1.575 | 6 / 2 | |
| 0.1.574 | 6 / 2 | |
| 0.1.573 | 6 / 2 | |
| 0.1.572 | 6 / 2 | |
| 0.1.571 | 6 / 2 | |
| 0.1.570 | 6 / 2 | |
| 0.1.569 | 6 / 2 | |
| 0.1.568 | 6 / 2 | |
| 0.1.567 | 6 / 2 | |
| 0.1.566 | 6 / 2 | |
| 0.1.565 | 6 / 2 | |
| 0.1.564 | 6 / 2 | |
| 0.1.563 | 6 / 2 | |
| 0.1.562 | 6 / 2 | |
| 0.1.561 | 6 / 2 | |
| 0.1.560 | 6 / 2 | |
| 0.1.559 | 6 / 2 | |
| 0.1.558 | 6 / 2 | |
| 0.1.557 | 6 / 2 | |
| 0.1.556 | 6 / 2 | |
| 0.1.555 | 6 / 2 | |
| 0.1.554 | 6 / 2 | |
| 0.1.553 | 6 / 2 | |
| 0.1.552 | 6 / 2 | |
| 0.1.551 | 6 / 2 | |
| 0.1.550 | 6 / 2 | |
| 0.1.549 | 6 / 2 | |
| 0.1.548 | 6 / 2 | |
| 0.1.546 | 6 / 2 | |
| 0.1.545 | 6 / 2 | |
| 0.1.544 | 6 / 2 | |
| 0.1.543 | 6 / 2 | |
| 0.1.542 | 6 / 2 | |
| 0.1.541 | 6 / 2 | |
| 0.1.540 | 6 / 2 |
v0.1.591
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.590
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.589
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.588
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.587
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.586
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.585
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.584
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.583
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.582
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.581
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.580
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.579
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.578
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.577
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.576
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.575
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.574
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.573
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.572
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.571
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.570
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.569
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.568
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.567
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.566
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.565
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.564
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.563
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.562
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.561
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.560
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.559
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.558
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.557
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.556
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.555
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.554
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.553
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.552
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.551
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.550
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.549
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.548
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.546
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.545
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.544
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.543
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.542
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.541
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.540
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.