registry / @atlaskit/editor-plugin-limited-mode / 27.0.0
@atlaskit/editor-plugin-limited-mode@27.0.0
LimitedMode plugin for @atlaskit/editor-core
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package exports an editor plugin that measures performance and enables limited mode according to editor-specific policy. The URL alert does not indicate runtime network behavior in the inspected package source.
Static reason
No blocking static signals were detected.
Trigger
The editor loads the plugin; performance monitoring runs when its dynamic limited-mode experiment is enabled, and analytics fire when the policy latches.
Impact
The editor may enter limited mode and emit operational telemetry through its host-provided analytics service.
Mechanism
Measures input latency and long tasks, changes editor state when configured thresholds are met, and reports the latch through the editor analytics API.
AI rationale
The package exports an editor plugin that measures performance and enables limited mode according to editor-specific policy. The URL alert does not indicate runtime network behavior in the inspected package source.
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package declares conventional CommonJS and ESM entrypoints for its editor plugin.
- The CommonJS entrypoint exposes limitedModePlugin, which creates a ProseMirror plugin for the editor.
- The plugin measures editor input and browser long tasks to decide when limited mode should activate.
- Analytics are sent through the editor-provided analytics API when the limited-mode latch is reached.
Evidence against
Behavioral surface
UrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
15"repository": "https://bitbucket.org/atlassian/atlassian-frontend-mirror",
"main": "dist/cjs/index.js",
"module": "dist/esm/index.js",
"module:es2019": "dist/es2019/index.js",
"types":
Low
Ai Review Evidence
The package declares conventional CommonJS and ESM entrypoints for its editor plugin.
package.jsonView on unpkg · L15dist/cjs/index.jsView file
1"use strict";
Object.defineProperty(exports, "__esModule", {
value: true
});
Object.defineProperty(exports, "limitedModePlugin", {
en
Low
Ai Review Evidence
The CommonJS entrypoint exposes limitedModePlugin, which creates a ProseMirror plugin for the editor.
dist/cjs/index.jsView on unpkg · L1dist/cjs/pm-plugins/utils/latch-detector.jsView file
Findings
5 Low
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/cjs/index.js
LowAi Review Evidencedist/cjs/pm-plugins/utils/latch-detector.js
LowAi Review Evidencedist/cjs/pm-plugins/main.js
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-limited-mode@27.0.0.
See all versions of @atlaskit/editor-plugin-limited-mode for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-limited-mode@27.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.