@atlaskit/editor-plugin-limited-mode@27.0.9
LimitedMode plugin for @atlaskit/editor-core
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe source sends runtime performance telemetry through the editor analytics API when limited mode latches. The README describes monitoring and experimentation but does not disclose this event or a way to disable it, so this merits a warning.
Decision evidence
public snapshot- The plugin fires a runtime operational analytics event when limited mode latches, sending latch reasons, input latency, sample counts, and related performance metrics.
- The event is enabled through a feature experiment; the README describes performance monitoring and experimentation but does not disclose this analytics event or provide an opt-out.
- The package has no lifecycle scripts, and its entry points export an editor plugin.
- The measured data relates to the package’s editor performance feature; no credential collection or direct network endpoint appears in the reviewed code.
Source & flagged code
4 flaggedThe plugin fires a runtime operational analytics event when limited mode latches, sending latch reasons, input latency, sample counts, and related performance metrics.
dist/cjs/pm-plugins/main.jsView on unpkg · L119The plugin fires a runtime operational analytics event when limited mode latches, sending latch reasons, input latency, sample counts, and related performance metrics.
Findings
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-limited-mode@27.0.9.
See all versions of @atlaskit/editor-plugin-limited-mode for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-limited-mode@27.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.