@powerlines/plugin-unimport
A Powerlines plugin to add imports to source code automatically via unimport.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@stryke/type-checks | AI (phantom-deps): Declared runtime dep used in config/plugin ecosystem context; phantom-dep false positive for this package's architecture. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): Declared runtime dep used in config/plugin ecosystem context; phantom-dep false positive for this package's architecture. | ai | |
| phantom-deps | phantom-dep:powerlines | AI (phantom-deps): Declared runtime dep used in config/plugin ecosystem context; phantom-dep false positive for this package's architecture. | ai | |
| phantom-deps | phantom-dep:@stryke/json | AI (phantom-deps): Declared runtime dep used in config/plugin ecosystem context; phantom-dep false positive for this package's architecture. | ai | |
| phantom-deps | phantom-dep:@stryke/path | AI (phantom-deps): Declared runtime dep used in config/plugin ecosystem context; phantom-dep false positive for this package's architecture. | ai | |
| phantom-deps | phantom-dep:@stryke/helpers | AI (phantom-deps): Declared runtime dep used in config/plugin ecosystem context; phantom-dep false positive for this package's architecture. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from stormie-bot to GitHub Actions is a documented CI/CD migration for storm-software org; SLSA provenance attestation confirms legitimate pipeline publishing. | ai | |
| dependencies | unvetted-dep:powerlines | AI (dependencies): powerlines is the parent package in the same Storm Software monorepo ecosystem; this is an expected internal dependency for a Powerlines plugin. | ai | |
| dependencies | unvetted-dep:@stryke/json | AI (dependencies): @stryke/json is part of the Storm Software / Stryke internal ecosystem, consistent with this package's publisher and org. | ai | |
| dependencies | unvetted-dep:@stryke/path | AI (dependencies): @stryke/path is part of the Storm Software / Stryke internal ecosystem, consistent with this package's publisher and org. | ai | |
| dependencies | unvetted-dep:@stryke/helpers | AI (dependencies): @stryke/helpers is part of the Storm Software / Stryke internal ecosystem, consistent with this package's publisher and org. | ai | |
| phantom-deps | phantom-dep:magic-string | AI (phantom-deps): magic-string is a legitimate, well-known package listed as a runtime dep; phantom detection is a packaging hygiene issue, not a security risk for this package. | ai |
Versions (showing 51 of 600)
| Version | Deps | Published |
|---|---|---|
| 0.1.625 | 8 / 2 | |
| 0.1.624 | 8 / 2 | |
| 0.1.623 | 8 / 2 | |
| 0.1.622 | 8 / 2 | |
| 0.1.621 | 8 / 2 | |
| 0.1.620 | 8 / 2 | |
| 0.1.619 | 8 / 2 | |
| 0.1.618 | 8 / 2 | |
| 0.1.617 | 8 / 2 | |
| 0.1.616 | 8 / 2 | |
| 0.1.615 | 8 / 2 | |
| 0.1.614 | 8 / 2 | |
| 0.1.613 | 8 / 2 | |
| 0.1.612 | 8 / 2 | |
| 0.1.611 | 8 / 2 | |
| 0.1.609 | 8 / 2 | |
| 0.1.608 | 8 / 2 | |
| 0.1.607 | 8 / 2 | |
| 0.1.606 | 8 / 2 | |
| 0.1.605 | 8 / 2 | |
| 0.1.604 | 8 / 2 | |
| 0.1.603 | 8 / 2 | |
| 0.1.602 | 8 / 2 | |
| 0.1.601 | 8 / 2 | |
| 0.1.600 | 8 / 2 | |
| 0.1.599 | 8 / 2 | |
| 0.1.598 | 8 / 2 | |
| 0.1.597 | 8 / 2 | |
| 0.1.596 | 8 / 2 | |
| 0.1.595 | 8 / 2 | |
| 0.1.594 | 8 / 2 | |
| 0.1.593 | 8 / 2 | |
| 0.1.592 | 8 / 2 | |
| 0.1.591 | 8 / 2 | |
| 0.1.590 | 8 / 2 | |
| 0.1.589 | 8 / 2 | |
| 0.1.588 | 8 / 2 | |
| 0.1.587 | 8 / 2 | |
| 0.1.586 | 8 / 2 | |
| 0.1.585 | 8 / 2 | |
| 0.1.584 | 8 / 2 | |
| 0.1.583 | 8 / 2 | |
| 0.1.582 | 8 / 2 | |
| 0.1.581 | 8 / 2 | |
| 0.1.580 | 8 / 2 | |
| 0.1.579 | 8 / 2 | |
| 0.1.578 | 8 / 2 | |
| 0.1.577 | 8 / 2 | |
| 0.1.576 | 8 / 2 | |
| 0.1.575 | 8 / 2 | |
| 0.1.574 | 8 / 2 |
v0.1.625
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.624
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.623
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.622
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.621
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.620
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.619
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.618
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.617
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.616
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.615
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.614
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.613
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.612
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.611
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.609
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.608
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.607
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.606
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.605
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.604
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.603
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.602
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.1.601
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.