@midscene/shared
An AI-powered automation SDK can control the page, perform assertions, and extract data in JSON format using natural language.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher is confirmed by SLSA provenance attestation; consistent with org-level CI/CD adoption. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decoding is used to write PNG screenshot data to a temp file in a CLI runner — standard browser automation pattern, no exfiltration or eval involved. | ai | |
| dependencies | unvetted-dep:@silvia-odwyer/photon | AI (dependencies): @silvia-odwyer/photon is a legitimate WebAssembly image processing library appropriate for a screenshot/browser automation tool. | ai |
Versions (showing 51 of 87)
| Version | Deps | Published |
|---|---|---|
| 1.10.7 | 7 / 8 | |
| 1.10.6 | 7 / 8 | |
| 1.10.5 | 8 / 8 | |
| 1.10.4 | 8 / 8 | |
| 1.10.3 | 8 / 8 | |
| 1.10.2 | 8 / 8 | |
| 1.10.1 | 8 / 8 | |
| 1.10.0 | 8 / 8 | |
| 1.9.8 | 10 / 9 | |
| 1.9.7 | 10 / 9 | |
| 1.9.6 | 10 / 9 | |
| 1.9.5 | 10 / 9 | |
| 1.9.4 | 10 / 9 | |
| 1.9.3 | 10 / 9 | |
| 1.9.2 | 10 / 9 | |
| 1.9.1 | 10 / 9 | |
| 1.9.0 | 10 / 9 | |
| 1.8.11 | 10 / 9 | |
| 1.8.10 | 10 / 9 | |
| 1.8.9 | 10 / 9 | |
| 1.8.8 | 10 / 9 | |
| 1.8.7 | 10 / 9 | |
| 1.8.6 | 10 / 9 | |
| 1.8.5 | 10 / 9 | |
| 1.8.4 | 10 / 9 | |
| 1.8.3 | 10 / 9 | |
| 1.8.2 | 10 / 9 | |
| 1.8.1 | 10 / 9 | |
| 1.8.0 | 10 / 9 | |
| 1.7.10 | 10 / 9 | |
| 1.7.9 | 10 / 9 | |
| 1.7.7 | 10 / 9 | |
| 1.7.6 | 10 / 9 | |
| 1.7.5 | 10 / 9 | |
| 1.7.4 | 10 / 9 | |
| 1.7.3 | 10 / 9 | |
| 1.7.2 | 10 / 9 | |
| 1.7.1 | 10 / 9 | |
| 1.7.0 | 10 / 9 | |
| 1.6.4 | 10 / 9 | |
| 1.6.3 | 10 / 9 | |
| 1.6.2 | 10 / 9 | |
| 1.6.1 | 10 / 9 | |
| 1.6.0 | 10 / 9 | |
| 1.5.8 | 10 / 9 | |
| 1.5.7 | 10 / 9 | |
| 1.5.6 | 10 / 9 | |
| 1.5.5 | 10 / 9 | |
| 1.5.4 | 10 / 9 | |
| 1.5.3 | 10 / 9 | |
| 1.5.2 | 10 / 9 |
v1.10.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.10.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.10.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.10.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.10.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.10.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.10.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.