registry / @atlaskit/editor-plugin-primary-toolbar / 31.0.3
@atlaskit/editor-plugin-primary-toolbar@31.0.3
Primary toolbar plugin for @atlaskit/editor-core
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe manifest and entry point lead to code that registers toolbar components and initializes editor plugin state. The reviewed code contains no install-time actions, credential handling, unrelated network activity, or other attack behavior.
Static reason
No blocking static signals were detected.
Trigger
The plugin runs when an application imports and initializes it for an editor.
Impact
No security impact beyond the package's stated editor-toolbar function was identified.
Mechanism
It registers toolbar components and initializes editor plugin state from the component registry.
AI rationale
The manifest and entry point lead to code that registers toolbar components and initializes editor plugin state. The reviewed code contains no install-time actions, credential handling, unrelated network activity, or other attack behavior.
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to dist/cjs/index.js as the CommonJS entry and declares CSS as the only side effect.
- The CommonJS entry re-exports primaryToolbarPlugin.
- The plugin builds a component registry and exposes component registration and editor plugin setup.
- The editor plugin initializes toolbar components from the registry and editor state.
Evidence against
- The package manifest has no lifecycle scripts or executable bin.
- No credential access, unrelated network requests, or destructive behavior was identified in the reviewed entry-point code.
Behavioral surface
Source & flagged code
4 flaggedpackage.jsonView file
17"repository": "https://bitbucket.org/atlassian/atlassian-frontend-monorepo",
"main": "dist/cjs/index.js",
"module": "dist/esm/index.js",
"module:es2019": "dist/es2019/index.js",
"types": "dist/types/index.d.ts",
"sideEffects": [
"*.compiled.css"
],
"atlaskit:src": "src/
Low
Ai Review Evidence
The manifest points to dist/cjs/index.js as the CommonJS entry and declares CSS as the only side effect.
package.jsonView on unpkg · L17dist/cjs/index.jsView file
1"use strict";
Object.defineProperty(exports, "__esModule", {
value: true
});
Object.defineProperty(exports, "primaryToolbarPlugin", {
enumerable: true,
get: function get() {
return _primaryToolbarPlugin.primaryToolbarPlugin;
}
});
var _primaryToolbarPlugin = require("./primaryToolbarPlugin");
Low
Ai Review Evidence
The CommonJS entry re-exports primaryToolbarPlugin.
dist/cjs/index.jsView on unpkg · L1Findings
4 Low
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/cjs/index.js
LowAi Review Evidencedist/cjs/primaryToolbarPlugin.js
LowAi Review Evidencedist/cjs/pm-plugins/pm-plugin.js
Affected versions and remediation
This report applies to @atlaskit/editor-plugin-primary-toolbar@31.0.3.
See all versions of @atlaskit/editor-plugin-primary-toolbar for other recorded verdicts.
- Review the evidence and your use of @atlaskit/editor-plugin-primary-toolbar@31.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.