@percy/cypress
Cypress client library for visual testing with Percy
39
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
percy-admin
Keywords
cypresspercyvisual testing
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher change from dgjones to percy-admin occurred in April 2019 — a legitimate org account transition. percy-admin has 368 approved packages and is the canonical Percy org account. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process usage is in run-tests.js (dev test runner), not in published runtime code. Expected for a Cypress testing library's dev tooling. | ai | |
| dependencies | unvetted-dep:@percy/sdk-utils | AI (dependencies): @percy/sdk-utils is a first-party Percy SDK dependency from the same organization (Perceptual Inc.); its presence is expected and stable across all versions of this package. | ai | |
| semgrep | semgrep:eval-usage | AI (semgrep): eval() is used to inject Percy's own DOM serialization library into the Cypress browser window — a documented, stable pattern for this SDK across all versions. | ai | |
| typosquat | typosquat.levenshtein:express | AI (typosquat): @percy/cypress is a scoped Percy org package for Cypress integration, not a typosquat of express. Levenshtein match is a clear false positive. | ai |
Versions (showing 39 of 39)
| Version | Deps | Published |
|---|---|---|
| 3.1.9 | 1 / 15 | |
| 3.1.8 | 1 / 15 | |
| 3.1.7 | 1 / 15 | |
| 3.1.6 | 1 / 15 | |
| 3.1.5 | 1 / 15 | |
| 3.1.4 | 1 / 15 | |
| 3.1.3 | 1 / 15 | |
| 3.1.2 | 1 / 15 | |
| 3.1.1 | 1 / 13 | |
| 3.1.0 | 1 / 13 | |
| 3.0.0 | 1 / 13 | |
| 2.3.4 | 2 / 8 | |
| 2.3.3 | 2 / 8 | |
| 2.3.2 | 2 / 8 | |
| 2.3.1 | 2 / 8 | |
| 2.3.0 | 2 / 8 | |
| 2.2.0 | 2 / 8 | |
| 2.1.1 | 2 / 8 | |
| 2.1.0 | 2 / 8 | |
| 2.0.1 | 2 / 8 | |
| 2.0.0 | 2 / 8 | |
| 1.0.9 | 1 / 8 | |
| 1.0.8 | 1 / 8 | |
| 1.0.7 | 1 / 8 | |
| 1.0.6 | 1 / 8 | |
| 1.0.5 | 1 / 5 | |
| 1.0.4 | 1 / 5 | |
| 1.0.3 | 1 / 5 | |
| 1.0.2 | 1 / 5 | |
| 1.0.1 | 1 / 5 | |
| 1.0.0 | 1 / 5 | |
| 0.2.3 | 1 / 3 | |
| 0.2.2 | 1 / 3 | |
| 0.2.1 | 1 / 3 | |
| 0.2.0 | 1 / 3 | |
| 0.1.0 | 1 / 3 | |
| 0.0.4 | 1 / 3 | |
| 0.0.3 | 1 / 3 | |
| 0.0.2 | 1 / 3 |
v3.1.9
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.