registry / @atlaskit/editor-plugin-limited-mode / 26.0.4
@atlaskit/editor-plugin-limited-mode@26.0.4
LimitedMode plugin for @atlaskit/editor-core
AI Security Review
scanned 13d ago · by lpm-firewall-aiInspected manifests and runtime entrypoint show an editor plugin with no identified attack behavior. Its observed measurements and analytics event are consistent with limited-mode performance monitoring.
Static reason
No blocking static signals were detected.
Trigger
An application loads and uses the editor plugin; runtime measurements occur during editor activity.
Impact
The observed behavior supports editor performance monitoring and limited-mode handling; no harmful effect was identified.
Mechanism
The plugin evaluates document size and browser performance, then emits an operational analytics event when limited mode latches.
AI rationale
Inspected manifests and runtime entrypoint show an editor plugin with no identified attack behavior. Its observed measurements and analytics event are consistent with limited-mode performance monitoring.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to the CommonJS and ES module entrypoints and lists editor-related dependencies.
- The inspected ProseMirror dependency manifest lists test and build scripts, with no install hook among the inspected script entries.
- The inspected experiment and Statsig dependency manifests identify Atlassian editor packages.
- The CommonJS entrypoint exports the limited-mode plugin.
- When used by an editor, the plugin measures browser performance and emits an operational analytics event with latch and device metrics; no attack behavior was identified.
Evidence against
Behavioral surface
UrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
16"main": "dist/cjs/index.js",
"module": "dist/esm/index.js",
"module:es2019": "dist/es2019/index.js",
"types": "dist/types/index.d.ts",
"sideEffects": false,
"atlaskit:src": "s
Low
Suspicious Dependency Evidence
The manifest points to the CommonJS and ES module entrypoints and lists editor-related dependencies.
package.jsonView on unpkg · L1621"atlaskit:src": "src/index.ts",
"dependencies": {
"@atlaskit/editor-plugin-analytics": "^29.0.0",
"@atlaskit/editor-prosemirror": "^9.0.0",
"@atlaskit/feature-gate-js-client": "^7.0.0",
"@atlaskit/platform-feature-e
Low
Suspicious Dependency Evidence
The manifest points to the CommonJS and ES module entrypoints and lists editor-related dependencies.
package.jsonView on unpkg · L21.lpm-dependency-evidence-b6c4441a-5e13-470d-9932-e19041dc0366/0/npm-linux/package.jsonView file
Findings
9 Low
LowUrl Strings
LowSuspicious Dependency Evidencepackage.json
LowSuspicious Dependency Evidencepackage.json
LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-b6c4441a-5e13-470d-9932-e19041dc0366/0/npm-linux/package.json
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b6c4441a-5e13-470d-9932-e19041dc0366/1/npm-linux/package.json
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b6c4441a-5e13-470d-9932-e19041dc0366/1/npm-linux/package.json
LowAi Review Evidence.lpm-dependency-evidence-b6c4441a-5e13-470d-9932-e19041dc0366/2/npm-linux/package.json
LowAi Review Evidence.lpm-dependency-evidence-b6c4441a-5e13-470d-9932-e19041dc0366/2/npm-linux/package.json
LowAi Review Evidencedist/cjs/index.js
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-limited-mode@26.0.4.
See all versions of @atlaskit/editor-plugin-limited-mode for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-limited-mode@26.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.