@serenity-js/core
The core Serenity/JS framework, providing the Screenplay Pattern interfaces, as well as the test reporting and integration infrastructure
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:dynamic-require | AI (semgrep): ModuleLoader is a documented plugin/module loading mechanism; dynamic require is intentional and stable across versions. | ai | |
| dependencies | unvetted-dep:tiny-types | AI (dependencies): tiny-types is a companion library in the serenity-js ecosystem, pinned to exact version. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @serenity-js/core is a long-established scoped package; Levenshtein match to 'cors' is a false positive. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decode is used for JSON artifact deserialization (JSONData model), not obfuscation. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get is used in a Proxy handler for Screenplay Pattern question chaining — legitimate pattern. | ai |
Versions (showing 51 of 119)
| Version | Deps | Published |
|---|---|---|
| 3.44.1 | 11 / 12 | |
| 3.44.0 | 11 / 12 | |
| 3.43.4 | 11 / 12 | |
| 3.43.3 | 11 / 12 | |
| 3.43.2 | 11 / 12 | |
| 3.43.1 | 11 / 12 | |
| 3.43.0 | 11 / 12 | |
| 3.42.2 | 11 / 12 | |
| 3.42.1 | 11 / 12 | |
| 3.39.0 | 11 / 12 | |
| 3.38.0 | 11 / 12 | |
| 3.37.2 | 11 / 12 | |
| 3.37.0 | 11 / 12 | |
| 3.35.2 | 11 / 12 | |
| 3.35.1 | 11 / 12 | |
| 3.35.0 | 11 / 12 | |
| 3.34.2 | 11 / 13 | |
| 3.34.1 | 11 / 13 | |
| 3.34.0 | 11 / 13 | |
| 3.33.1 | 11 / 13 | |
| 3.32.5 | 11 / 13 | |
| 3.32.4 | 11 / 13 | |
| 3.32.3 | 11 / 13 | |
| 3.32.2 | 11 / 13 | |
| 3.32.1 | 11 / 13 | |
| 3.32.0 | 11 / 13 | |
| 3.31.17 | 11 / 13 | |
| 3.31.16 | 11 / 13 | |
| 3.31.15 | 11 / 13 | |
| 3.31.14 | 11 / 13 | |
| 3.31.13 | 11 / 13 | |
| 3.31.12 | 11 / 13 | |
| 3.31.10 | 11 / 13 | |
| 3.31.9 | 11 / 13 | |
| 3.31.8 | 11 / 13 | |
| 3.31.7 | 11 / 13 | |
| 3.31.6 | 11 / 13 | |
| 3.31.5 | 11 / 13 | |
| 3.31.4 | 11 / 13 | |
| 3.31.2 | 11 / 13 | |
| 3.31.1 | 11 / 13 | |
| 3.31.0 | 11 / 13 | |
| 3.30.0 | 11 / 13 | |
| 3.29.5 | 11 / 13 | |
| 3.29.4 | 11 / 13 | |
| 3.29.3 | 11 / 13 | |
| 3.29.2 | 11 / 13 | |
| 3.28.0 | 11 / 13 | |
| 3.27.0 | 11 / 13 | |
| 3.26.1 | 11 / 13 | |
| 3.26.0 | 11 / 13 |
v3.44.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.31.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.31.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.31.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.31.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.30.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.29.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.29.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.29.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.29.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.28.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.27.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.26.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.
v3.26.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.