@bsbofmusic/cdper-core
Shared runtime core for cdper plugins: CDP connection, smart wait, health, recovery, and plugin contracts
25
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
bsbofmusic
Keywords
cdpsharedcdpercore
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions publisher matches CI/CD automation; repo and package content unchanged across versions. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get inside a Proxy trap for Playwright API binding — idiomatic JS, not obfuscation. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Used to wrap user-supplied Playwright page functions — standard evaluate() adapter pattern, not arbitrary remote code. | ai | |
| provenance | no-provenance | AI (provenance): No provenance across all versions; stable false positive for this package. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Active development cadence with 26 versions in 62 days; rapid publishes are normal for this package. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): 127.0.0.1 is the local CDP debug endpoint; expected pattern for a CDP bridge library. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process runs curl against localhost CDP port only; no external command execution. | ai |
Versions (showing 25 of 25)
| Version | Deps | Published |
|---|---|---|
| 1.3.11 | 1 / 0 | |
| 1.3.10 | 1 / 0 | |
| 1.3.9 | 1 / 0 | |
| 1.3.8 | 1 / 0 | |
| 1.3.7 | 1 / 0 | |
| 1.3.6 | 1 / 0 | |
| 1.3.5 | 1 / 0 | |
| 1.3.4 | 2 / 0 | |
| 1.3.3 | 2 / 0 | |
| 1.3.2 | 2 / 0 | |
| 1.2.9 | 1 / 0 | |
| 1.2.8 | 1 / 0 | |
| 1.2.7 | 1 / 0 | |
| 1.2.6 | 1 / 0 | |
| 1.2.5 | 1 / 0 | |
| 1.2.4 | 1 / 0 | |
| 1.2.3 | 1 / 0 | |
| 1.2.2 | 1 / 0 | |
| 1.2.1 | 1 / 0 | |
| 1.2.0 | 1 / 0 | |
| 1.1.4 | 1 / 0 | |
| 1.1.3 | 1 / 0 | |
| 1.1.2 | 1 / 0 | |
| 1.1.1 | 1 / 0 | |
| 1.1.0 | 1 / 0 |