registry / @atlaskit/editor-plugin-primary-toolbar / 31.0.2
@atlaskit/editor-plugin-primary-toolbar@31.0.2
Primary toolbar plugin for @atlaskit/editor-core
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package metadata and entry point describe a toolbar plugin with no lifecycle scripts. Its inspected implementation builds toolbar state, registers components, and uses an editor feature flag for configuration; no harmful behavior was identified.
Static reason
No blocking static signals were detected.
Trigger
The plugin runs when an editor imports and initializes it.
Impact
Toolbar rendering and configuration within the editor.
Mechanism
It registers toolbar components and selects configuration using editor state and a feature flag.
AI rationale
The package metadata and entry point describe a toolbar plugin with no lifecycle scripts. Its inspected implementation builds toolbar state, registers components, and uses an editor feature flag for configuration; no harmful behavior was identified.
Decision evidence
public snapshotAI called this Clean at 98.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Package metadata describes a toolbar plugin and declares no lifecycle scripts.
- The CommonJS entry point exports the primary toolbar plugin.
- The plugin creates a component registry and ProseMirror plugin state for toolbar components.
- Toolbar configuration checks an editor feature flag to select toolbar components.
- The registration action stores supplied toolbar components in the registry.
Evidence against
Behavioral surface
Source & flagged code
5 flaggedpackage.jsonView file
1{
"name": "@atlaskit/editor-plugin-primary-toolbar",
"version": "31.0.2",
"description": "Primary toolbar plugin for @atlaskit/editor-core",
"author": "Atlassian Pty Ltd",
"license": "A
Low
Suspicious Lifecycle Evidence
Package metadata describes a toolbar plugin and declares no lifecycle scripts.
package.jsonView on unpkg · L1dist/cjs/index.jsView file
1"use strict";
Object.defineProperty(exports, "__esModule", {
value: true
});
Object.defineProperty(exports, "primaryToolbarPlugin", {
enumerable: true,
get: function get() {
Low
Ai Review Evidence
The CommonJS entry point exports the primary toolbar plugin.
dist/cjs/index.jsView on unpkg · L1dist/cjs/primaryToolbarPlugin.jsView file
Findings
5 Low
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/cjs/index.js
LowAi Review Evidencedist/cjs/primaryToolbarPlugin.js
LowAi Review Evidencedist/cjs/pm-plugins/toolbar-configuration.js
LowAi Review Evidencedist/cjs/editor-actions/actions.js
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-primary-toolbar@31.0.2.
See all versions of @atlaskit/editor-plugin-primary-toolbar for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-primary-toolbar@31.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.