← Home

@playwright/cli

npm Repository Homepage

Playwright CLI

25
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

pavelfeldmanyurysdgozman-msplaywright-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from pavelfeldman (Playwright team) to GitHub Actions CI/CD. SLSA provenance confirms legitimate automated publishing pipeline. ai
phantom-deps phantom-dep:minimist AI (phantom-deps): minimist is declared and likely used by the CLI bin entry point; phantom-dep detection is a false positive for CLI argument parsing. ai
typosquat typosquat.levenshtein:joi AI (typosquat): False positive: @playwright/cli is a scoped Microsoft package with no relation to 'joi'. Levenshtein distance match is spurious for scoped packages with long names. ai
phantom-deps phantom-dep:playwright AI (phantom-deps): playwright is a declared runtime dependency used as a CLI subprocess/binary, not directly imported in JS source. Expected pattern for a CLI wrapper package. ai

Versions (showing 25 of 25)

Version Deps Published
0.1.17 2 / 2
0.1.16 2 / 2
0.1.15 2 / 2
0.1.14 2 / 2
0.1.13 2 / 2
0.1.12 2 / 2
0.1.11 1 / 2
0.1.10 1 / 2
0.1.9 1 / 2
0.1.8 1 / 2
0.1.7 2 / 2
0.1.6 2 / 2
0.1.5 2 / 2
0.1.4 2 / 2
0.1.3 2 / 2
0.1.2 2 / 2
0.1.1 2 / 2
0.1.0 2 / 2
0.0.66 3 / 0
0.0.65 3 / 0
0.0.64 3 / 0
0.0.63 3 / 0
0.0.62 3 / 0
0.0.61 3 / 0
0.0.60 3 / 0

v0.1.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.