registry / @atlaskit/editor-plugin-limited-mode / 27.0.5
@atlaskit/editor-plugin-limited-mode@27.0.5
LimitedMode plugin for @atlaskit/editor-core
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe entry point exposes an editor plugin whose documented purpose matches its document and performance checks. Its analytics event reports latch diagnostics through the host editor API, and no unrelated network destination or harmful behavior was identified.
Static reason
No blocking static signals were detected.
Trigger
Using the plugin in an Atlaskit editor; runtime measurement requires the dynamic limited-mode experiment to be enabled.
Impact
No malicious impact identified.
Mechanism
The plugin monitors document size and editor performance, updates limited-mode state when its criteria are met, and reports latch metrics through the host editor analytics API.
AI rationale
The entry point exposes an editor plugin whose documented purpose matches its document and performance checks. Its analytics event reports latch diagnostics through the host editor API, and no unrelated network destination or harmful behavior was identified.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Package metadata identifies an Atlaskit Editor limited-mode plugin.
- The CommonJS entry point only re-exports the limited-mode plugin.
- Performance measurement is enabled only when the dynamic limited-mode experiment is active; otherwise the plugin returns without setting up observers.
- When the plugin latches, it emits an operational event through the editor's analytics API with limited-mode reasons and performance metrics.
- The README describes document-size monitoring and automatic limited mode as the plugin's purpose.
Evidence against
Behavioral surface
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
2"name": "@atlaskit/editor-plugin-limited-mode",
"version": "27.0.5",
"description": "LimitedMode plugin for @atlaskit/editor-core",
"author": "Atlassian Pty Ltd",
"license": "Apache-2.0
Low
Ai Review Evidence
Package metadata identifies an Atlaskit Editor limited-mode plugin.
package.jsonView on unpkg · L2dist/cjs/index.jsView file
6Object.defineProperty(exports, "limitedModePlugin", {
enumerable: true,
get: function get() {
return _limitedMod
Low
Ai Review Evidence
The CommonJS entry point only re-exports the limited-mode plugin.
dist/cjs/index.jsView on unpkg · L6dist/cjs/pm-plugins/main.jsView file
Findings
8 Low
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/cjs/index.js
LowAi Review Evidencedist/cjs/pm-plugins/main.js
LowAi Review Evidencedist/cjs/pm-plugins/main.js
LowAi Review Evidencedist/cjs/pm-plugins/main.js
LowAi Review Evidencedist/cjs/pm-plugins/main.js
LowAi Review EvidenceREADME.md
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-limited-mode@27.0.5.
See all versions of @atlaskit/editor-plugin-limited-mode for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-limited-mode@27.0.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.