@bitwarden/cli
A secure and free password manager for all of your devices.
5
Versions
SEE LICENSE IN LICENSE.txt
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
mchecinskibwracostabwagallesfntylerbbieteaj-bwbribitwardenapixley_bwbwvgrassia
Keywords
bitwardenpasswordvaultpassword managercli
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Bitwarden migrated to GitHub Actions CI publishing; consistent with org-wide automation shift. | ai | |
| provenance | missing-githead | AI (provenance): Expected artifact of GitHub Actions publish pipeline change; not a supply-chain indicator for this package. | ai | |
| provenance | no-provenance | AI (provenance): Established Bitwarden package; absence of Sigstore attestation is not a risk signal here. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers are Bitwarden employees added as part of org-wide team expansion. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): kspearrin removal consistent with role change within Bitwarden org, not a takeover. | ai | |
| phantom-deps | phantom-dep:koa | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution, not direct imports. | ai | |
| phantom-deps | phantom-dep:lunr | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:open | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:rxjs | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:jsdom | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:jszip | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:lowdb | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:tldts | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:multer | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:semver | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:zxcvbn | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:core-js | AI (phantom-deps): Bundled CLI; known implicit runtime polyfill dependency. | ai | |
| phantom-deps | phantom-dep:inquirer | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai | |
| phantom-deps | phantom-dep:koa-json | AI (phantom-deps): Bundled CLI; deps listed for webpack/pkg resolution. | ai |