@midscene/core
Automate browser actions, extract data, and perform assertions using AI. It offers JavaScript SDK, Chrome extension, and support for scripting in YAML. See https://midscenejs.com/ for details.
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
quanruzhoushawyuyutaotaojingkai.zhao
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/types/ai-model/prompt/recorder-ui-describer.d.ts | AI (source-diff): Long line is a string-literal AI prompt in a .d.ts declaration file, not obfuscated code. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainer quanru has a clean track record (16 approved, 0 rejected); consistent with legitimate org-level maintainer expansion. | ai | |
| provenance | publisher-changed | AI (provenance): quanru is a legitimate team member in the web-infra-dev org with 16 approved packages; transition from zhoushaw appears to be an internal org handoff, not a compromise. | ai | |
| phantom-deps | phantom-dep:fetch-socks | AI (phantom-deps): fetch-socks is properly declared in dependencies and referenced in config files; not a phantom dependency. | ai | |
| phantom-deps | phantom-dep:dotenv | AI (phantom-deps): dotenv is properly declared in dependencies and referenced in config files; not a phantom dependency. | ai | |
| phantom-deps | phantom-dep:undici | AI (phantom-deps): undici is properly declared and is a known implicit runtime dependency; not a phantom dependency. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @midscene/core is a scoped AI browser automation package with 639 days history, 1310 versions, and 24k weekly downloads. The Levenshtein match to 'cors' is a false positive — completely different purpose and namespace. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Package has a clear description, homepage, GitHub repo, and substantial download history. Short README and missing keywords are cosmetic issues, not spam indicators. | ai |
Versions (showing 51 of 80)
| Version | Deps | Published |
|---|---|---|
| 1.10.0 | 13 / 8 | |
| 1.9.8 | 13 / 8 | |
| 1.9.7 | 13 / 8 | |
| 1.9.6 | 13 / 8 | |
| 1.9.5 | 13 / 8 | |
| 1.9.4 | 13 / 8 | |
| 1.9.3 | 13 / 8 | |
| 1.9.2 | 13 / 8 | |
| 1.9.1 | 11 / 8 | |
| 1.9.0 | 11 / 8 | |
| 1.8.11 | 11 / 8 | |
| 1.8.10 | 11 / 8 | |
| 1.8.9 | 11 / 8 | |
| 1.8.8 | 11 / 8 | |
| 1.8.7 | 11 / 8 | |
| 1.8.6 | 11 / 8 | |
| 1.8.5 | 11 / 8 | |
| 1.8.4 | 11 / 8 | |
| 1.8.3 | 11 / 8 | |
| 1.8.2 | 11 / 8 | |
| 1.8.1 | 11 / 8 | |
| 1.8.0 | 11 / 8 | |
| 1.7.10 | 11 / 8 | |
| 1.7.9 | 11 / 8 | |
| 1.7.7 | 11 / 8 | |
| 1.7.6 | 11 / 8 | |
| 1.7.5 | 11 / 8 | |
| 1.7.4 | 11 / 8 | |
| 1.7.3 | 11 / 8 | |
| 1.7.2 | 11 / 8 | |
| 1.7.1 | 11 / 8 | |
| 1.7.0 | 11 / 8 | |
| 1.6.4 | 11 / 8 | |
| 1.6.3 | 11 / 8 | |
| 1.6.2 | 11 / 8 | |
| 1.6.1 | 11 / 8 | |
| 1.6.0 | 11 / 8 | |
| 1.5.8 | 11 / 8 | |
| 1.5.7 | 11 / 8 | |
| 1.5.6 | 11 / 8 | |
| 1.5.5 | 11 / 8 | |
| 1.5.4 | 11 / 8 | |
| 1.5.3 | 11 / 8 | |
| 1.5.2 | 11 / 7 | |
| 1.5.1 | 11 / 7 | |
| 1.5.0 | 11 / 7 | |
| 1.4.9 | 11 / 7 | |
| 1.4.8 | 11 / 7 | |
| 1.4.7 | 11 / 7 | |
| 1.4.6 | 11 / 7 | |
| 1.4.5 | 11 / 7 |