@dyyz1993/agent-browser
Headless browser automation CLI for AI agents
7
Versions
Apache-2.0
License
Yes
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
dyyz1993
Keywords
browserautomationheadlesschromecdpcliagent
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-dropped | AI (source-diff): Size drop reflects intentional migration to prebuilt Rust binary distribution; not a stub/redirect. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): Binaries are Rust-compiled platform CLIs built from the public repo; consistent with documented build:native scripts. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Headless browser automation tool with native binaries; postinstall for setup is expected and consistent across versions. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process used in build/setup scripts for native binary management; not in runtime code path. | ai |