@atlaskit/editor-plugin-limited-mode@27.0.2
LimitedMode plugin for @atlaskit/editor-core
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest and entry points match an Atlassian editor plugin, and its runtime behavior is limited to measuring editor performance, changing editor mode, and emitting a corresponding analytics event. No install hooks, package-directed network calls, credential handling, or unrelated automatic actions were found.
Decision evidence
public snapshot- The manifest identifies this as an Atlassian editor limited-mode plugin and points to its CJS and ESM entry points.
- The CJS entry point re-exports the plugin; the plugin creates an editor plugin when registered.
- The runtime monitors editor input and browser performance, then reports limited-mode latch details through the editor analytics API.
- No install lifecycle scripts are present in the manifest.
- Searches of the package’s CJS code found no HTTP or fetch calls.
- The URL literals identified by the scanner are consistent with package registry and repository metadata.
Source & flagged code
6 flaggedThe manifest identifies this as an Atlassian editor limited-mode plugin and points to its CJS and ESM entry points.
package.jsonView on unpkg · L2The manifest identifies this as an Atlassian editor limited-mode plugin and points to its CJS and ESM entry points.
package.jsonView on unpkg · L15Findings
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-limited-mode@27.0.2.
See all versions of @atlaskit/editor-plugin-limited-mode for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-limited-mode@27.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.