← Home

@powerlines/plugin-webpack

npm Repository Homepage

A package containing a Powerlines plugin to build projects using Webpack.

100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

webpackpowerlinesstorm-softwarepowerlines-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/api-context.mjs AI (source-diff): Rolldown minified bundle output; readable logic, no obfuscation or exfiltration. ai
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/api-context.cjs AI (source-diff): Rolldown minified bundle output; readable logic, no obfuscation or exfiltration. ai
phantom-deps phantom-dep:@stryke/helpers AI (phantom-deps): Declared dep used via config/re-export pattern in this monorepo; stable false positive. ai
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/environment-context.cjs AI (source-diff): Rolldown-bundled CJS output. Content is readable environment context implementation. SLSA provenance confirmed. ai
source-diff obfuscated-file:dist/powerlines/schemas/fs.cjs AI (source-diff): Rolldown-bundled CJS output implementing Cap'n Proto schema structs. Legitimate build artifact. SLSA provenance confirmed. ai
source-diff obfuscated-file:dist/powerlines/src/internal/helpers/resolve-tsconfig.cjs AI (source-diff): Rolldown-bundled CJS output for TypeScript config resolution. Readable, legitimate code. SLSA provenance confirmed. ai
source-diff obfuscated-file:dist/powerlines/src/lib/fs/vfs.cjs AI (source-diff): Rolldown-bundled CJS output implementing virtual filesystem. Readable, legitimate code. SLSA provenance confirmed. ai
source-diff obfuscated-file:dist/powerlines/src/api.cjs AI (source-diff): Rolldown-bundled CJS output with readable identifiers and legitimate imports. SLSA provenance confirms CI/CD build origin. Standard for this package's build pipeline. ai
source-diff obfuscated-file:dist/powerlines/src/lib/contexts/context.cjs AI (source-diff): Rolldown-bundled CJS output. Content is readable plugin context implementation code. SLSA provenance confirmed. ai
publish-pattern new-deps-added AI (publish-pattern): unplugin is a well-known plugin framework; addition is semantically consistent with the new ./helpers/unplugin export path. Not a suspicious dependency. ai
provenance publisher-changed AI (provenance): Storm Software migrated publishing from stormie-bot to GitHub Actions with SLSA provenance attestation — a supply chain improvement, not a compromise. Stable for this package. ai
phantom-deps phantom-dep:@stryke/types AI (phantom-deps): Type definitions used in plugin implementation; legitimate for TypeScript-based plugins. ai
phantom-deps phantom-dep:webpack AI (phantom-deps): Webpack is the core framework for this plugin; referenced in config/plugin interface rather than direct imports. ai
phantom-deps phantom-dep:jiti AI (phantom-deps): jiti is used for dynamic imports in webpack plugin configuration; legitimate pattern for build tools. ai
phantom-deps phantom-dep:defu AI (phantom-deps): defu is used for config merging in webpack plugins; referenced in config files rather than direct imports. ai
phantom-deps phantom-dep:powerlines AI (phantom-deps): powerlines is the plugin framework; referenced in plugin interface rather than direct imports. ai
phantom-deps phantom-dep:@stryke/fs AI (phantom-deps): Utility dependency for file operations; referenced in config/plugin logic rather than direct imports. ai
phantom-deps phantom-dep:@stryke/path AI (phantom-deps): Utility dependency for path operations; referenced in config/plugin logic rather than direct imports. ai
phantom-deps phantom-dep:@stryke/type-checks AI (phantom-deps): Utility dependency for type checking; referenced in plugin logic rather than direct imports. ai
dependencies unvetted-dep:@powerlines/core AI (dependencies): @powerlines/core is a first-party dependency from the same Storm Software organization as this package; unvetted status reflects pipeline ordering, not a third-party risk. ai
dependencies unvetted-dep:@stryke/path AI (dependencies): @stryke/path is another Storm Software namespace package; consistent with same-publisher ecosystem dependency, not an external unknown. ai

Versions (showing 100 of 404)

Version Deps Published
0.5.518 7 / 2
0.5.517 7 / 2
0.5.516 7 / 2
0.5.515 7 / 2
0.5.514 7 / 2
0.5.513 7 / 2
0.5.512 7 / 2
0.5.511 7 / 2
0.5.510 7 / 2
0.5.509 7 / 2
0.5.500 7 / 2
0.5.499 7 / 2
0.5.497 7 / 2
0.5.496 7 / 2
0.5.495 7 / 2
0.5.494 7 / 2
0.5.493 7 / 2
0.5.492 6 / 2
0.5.491 6 / 2
0.5.490 6 / 2
0.5.488 6 / 2
0.5.487 6 / 2
0.5.486 6 / 2
0.5.485 6 / 2
0.5.484 6 / 2
0.5.483 6 / 2
0.5.482 6 / 2
0.5.481 6 / 2
0.5.480 6 / 2
0.5.479 6 / 2
0.5.478 6 / 2
0.5.477 6 / 2
0.5.476 6 / 2
0.5.475 6 / 2
0.5.474 6 / 2
0.5.473 6 / 2
0.5.472 6 / 2
0.5.471 6 / 2
0.5.470 6 / 2
0.5.469 6 / 2
0.5.468 6 / 2
0.5.467 6 / 2
0.5.466 6 / 2
0.5.465 6 / 2
0.5.464 6 / 2
0.5.463 6 / 2
0.5.462 6 / 2
0.5.461 6 / 2
0.5.460 6 / 2
0.5.457 5 / 2
0.5.456 5 / 2
0.5.455 5 / 2
0.5.453 5 / 2
0.5.452 5 / 2
0.5.451 5 / 2
0.5.450 5 / 2
0.5.449 5 / 2
0.5.448 5 / 2
0.5.447 5 / 2
0.5.446 5 / 2
0.5.445 5 / 2
0.5.444 5 / 2
0.5.443 5 / 2
0.5.442 5 / 2
0.5.441 4 / 2
0.5.440 4 / 2
0.5.439 4 / 2
0.5.438 4 / 2
0.5.437 4 / 2
0.5.436 4 / 2
0.5.435 4 / 2
0.5.434 4 / 2
0.5.433 4 / 2
0.5.432 4 / 2
0.5.431 4 / 2
0.5.430 4 / 2
0.5.429 4 / 2
0.5.428 4 / 2
0.5.427 4 / 2
0.5.426 4 / 2
0.5.425 4 / 2
0.5.424 4 / 2
0.5.423 4 / 2
0.5.422 4 / 2
0.5.421 4 / 2
0.5.420 4 / 2
0.5.419 4 / 2
0.5.418 4 / 2
0.5.417 4 / 2
0.5.416 4 / 2
0.5.415 4 / 2
0.5.414 4 / 2
0.5.413 4 / 2
0.5.412 4 / 2
0.5.411 4 / 2
0.5.410 4 / 2
0.5.409 4 / 2
0.5.408 4 / 2
0.5.407 4 / 2
0.5.406 4 / 2
Showing 100 of 404 Next page →