registry / @atlaskit/editor-plugin-primary-toolbar / 30.0.4
@atlaskit/editor-plugin-primary-toolbar@30.0.4
Primary toolbar plugin for @atlaskit/editor-core
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe manifest has no install hook, and the inspected runtime implements editor toolbar registration and configuration. The feature experiment and Babel helpers are consistent with those functions; no concrete malicious behavior was found.
Static reason
No blocking static signals were detected.
Trigger
Importing and initializing the editor plugin.
Impact
No security impact was identified.
Mechanism
The plugin registers components in memory and constructs toolbar state; the experiment check selects which toolbar configuration to use.
AI rationale
The manifest has no install hook, and the inspected runtime implements editor toolbar registration and configuration. The feature experiment and Babel helpers are consistent with those functions; no concrete malicious behavior was found.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest selects CommonJS and ESM entrypoints and declares no install lifecycle hook.
- The inspected dependencies are Atlassian editor/feature flag packages and Babel runtime helpers; the Babel helpers perform module interop and array conversion.
- The runtime creates an in-memory component registry and derives toolbar components from that registry and editor state.
- The feature experiment check selects toolbar configuration; no credential collection, file harvesting, or outbound request behavior was identified in the inspected package source.
Evidence against
Behavioral surface
Source & flagged code
8 flaggedpackage.jsonView file
12site": {
"name": "EditorPluginPrimaryToolbar",
"category": "Components"
}
},
"repository": "https://bitbucket.org/atlassian/atlassian-frontend-monorepo",
"main": "dist/cjs/index.js",
"module": "dist/esm/index
Low
Suspicious Lifecycle Evidence
The package manifest selects CommonJS and ESM entrypoints and declares no install lifecycle hook.
package.jsonView on unpkg · L12.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/0/npm-linux/package.jsonView file
11npmjs.org/"
},
"repository": "https://bitbucket.org/atlassian/atlassian-frontend-monorepo",
"main": "dist/cjs/index.js",
"module": "dist/esm/index.js",
"module:es2019": "dist/es2019/ind
Low
Suspicious Dependency Evidence
The inspected dependencies are Atlassian editor/feature flag packages and Babel runtime helpers; the Babel helpers perform module interop and array conversion.
.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/0/npm-linux/package.jsonFindings
8 Low
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/0/npm-linux/package.json
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/1/npm-linux/package.json
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/2/npm-linux/package.json
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/2/npm-linux/helpers/interopRequireDefault.js
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/2/npm-linux/helpers/toConsumableArray.js
LowSuspicious Dependency Evidence.lpm-dependency-evidence-b406eced-359c-487d-8c0a-b7bf1a139709/2/npm-linux/helpers/esm/toConsumableArray.js
LowAi Review Evidencedist/cjs/primaryToolbarPlugin.js
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-primary-toolbar@30.0.4.
See all versions of @atlaskit/editor-plugin-primary-toolbar for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-primary-toolbar@30.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.