@atlaskit/editor-plugin-limited-mode@26.0.3
⚠ Under reviewLimitedMode plugin for @atlaskit/editor-core
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected runtime code shows editor plugin behavior, with no confirmed attack surface. Because the declared and imported @atlaskit/tmp-editor-statsig dependency has no inspected source in the supplied snapshot, its behavior cannot be cleared.
Decision evidence
public snapshot- The manifest declares @atlaskit/tmp-editor-statsig, and both runtime builds import its exp-val-equals module.
- The supplied snapshot does not contain inspected source for that dependency, so its runtime behavior remains unresolved.
- The inspected plugin code uses the imported experiment check and editor state to enable limited mode and update the editor node ID provider.
Source & flagged code
4 flaggedThe manifest declares @atlaskit/tmp-editor-statsig, and both runtime builds import its exp-val-equals module.
package.jsonView on unpkg · L28The manifest declares @atlaskit/tmp-editor-statsig, and both runtime builds import its exp-val-equals module.
dist/cjs/limitedModePlugin.jsView on unpkg · L10Findings
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-limited-mode@26.0.3.
See all versions of @atlaskit/editor-plugin-limited-mode for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-limited-mode@26.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.