appium-xcuitest-driver
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI/CD publishing with SLSA provenance; stable for this package. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Normal maintainer roster changes in a large org (appium); boneskull removal is expected. | ai | |
| source-diff | large-new-source-files | AI (source-diff): TypeScript source files now included in package; expected for TS migration. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Passing process.env to child process for WDA signing is standard pattern for this driver. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Decoding certificate content for iOS simulator simctl — legitimate driver functionality. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Raw IP is 127.0.0.1 (localhost) for WebDriverAgent communication — expected for this driver. | ai | |
| phantom-deps | phantom-dep:moment | AI (phantom-deps): moment is a declared runtime dependency; phantom-dep heuristic misfires here. | ai |
Versions (showing 100 of 153)
| Version | Deps | Published |
|---|---|---|
| 12.1.0 | 22 / 25 | |
| 12.0.0 | 22 / 25 | |
| 11.17.7 | 22 / 24 | |
| 11.17.6 | 22 / 24 | |
| 11.17.5 | 22 / 24 | |
| 11.17.4 | 22 / 24 | |
| 11.17.3 | 22 / 22 | |
| 11.17.2 | 23 / 22 | |
| 11.17.1 | 23 / 22 | |
| 11.17.0 | 23 / 22 | |
| 11.16.3 | 23 / 22 | |
| 11.16.2 | 23 / 23 | |
| 11.16.1 | 23 / 23 | |
| 11.16.0 | 23 / 23 | |
| 11.15.0 | 23 / 23 | |
| 11.14.1 | 23 / 23 | |
| 11.14.0 | 23 / 23 | |
| 11.13.0 | 23 / 23 | |
| 11.12.2 | 23 / 23 | |
| 11.12.1 | 23 / 23 | |
| 11.12.0 | 23 / 23 | |
| 11.11.2 | 23 / 23 | |
| 11.11.1 | 23 / 23 | |
| 11.11.0 | 23 / 23 | |
| 11.9.1 | 23 / 23 | |
| 11.9.0 | 23 / 23 | |
| 11.8.1 | 23 / 23 | |
| 11.8.0 | 23 / 23 | |
| 11.7.7 | 23 / 23 | |
| 11.7.6 | 23 / 23 | |
| 11.7.5 | 23 / 23 | |
| 11.7.4 | 23 / 23 | |
| 11.7.3 | 23 / 23 | |
| 11.7.2 | 23 / 23 | |
| 11.7.1 | 23 / 23 | |
| 11.7.0 | 23 / 23 | |
| 11.6.1 | 24 / 24 | |
| 11.6.0 | 24 / 24 | |
| 11.5.1 | 24 / 24 | |
| 11.5.0 | 24 / 24 | |
| 11.4.2 | 24 / 24 | |
| 11.4.1 | 24 / 24 | |
| 11.4.0 | 24 / 24 | |
| 11.3.1 | 24 / 24 | |
| 11.3.0 | 24 / 24 | |
| 11.2.4 | 24 / 24 | |
| 11.2.3 | 24 / 24 | |
| 11.2.2 | 24 / 24 | |
| 11.2.1 | 24 / 24 | |
| 11.2.0 | 24 / 24 | |
| 11.1.0 | 25 / 25 | |
| 11.0.4 | 25 / 25 | |
| 11.0.3 | 25 / 25 | |
| 11.0.2 | 25 / 25 | |
| 11.0.1 | 25 / 25 | |
| 11.0.0 | 25 / 25 | |
| 10.43.1 | 26 / 25 | |
| 10.43.0 | 26 / 25 | |
| 10.42.0 | 26 / 25 | |
| 10.41.0 | 26 / 25 | |
| 10.40.2 | 26 / 25 | |
| 10.40.1 | 26 / 25 | |
| 10.40.0 | 26 / 25 | |
| 10.39.2 | 26 / 25 | |
| 10.39.1 | 26 / 25 | |
| 10.39.0 | 26 / 25 | |
| 10.38.0 | 26 / 25 | |
| 10.37.0 | 26 / 25 | |
| 10.36.4 | 26 / 25 | |
| 10.36.3 | 26 / 25 | |
| 10.36.2 | 26 / 25 | |
| 10.36.1 | 26 / 25 | |
| 10.36.0 | 26 / 25 | |
| 10.35.0 | 26 / 25 | |
| 10.34.0 | 26 / 25 | |
| 10.33.0 | 26 / 25 | |
| 10.32.1 | 26 / 25 | |
| 10.32.0 | 26 / 25 | |
| 10.31.0 | 26 / 25 | |
| 10.30.1 | 26 / 25 | |
| 10.30.0 | 26 / 25 | |
| 10.29.0 | 26 / 25 | |
| 10.28.1 | 26 / 25 | |
| 10.28.0 | 26 / 25 | |
| 10.27.0 | 25 / 26 | |
| 10.26.0 | 25 / 26 | |
| 10.25.0 | 25 / 26 | |
| 10.24.2 | 25 / 26 | |
| 10.24.1 | 25 / 26 | |
| 10.24.0 | 25 / 26 | |
| 10.23.3 | 25 / 26 | |
| 10.23.2 | 25 / 26 | |
| 10.23.1 | 25 / 26 | |
| 10.23.0 | 25 / 26 | |
| 10.22.0 | 25 / 26 | |
| 10.21.3 | 25 / 26 | |
| 10.21.2 | 25 / 26 | |
| 10.21.1 | 25 / 26 | |
| 10.21.0 | 25 / 26 | |
| 10.20.0 | 25 / 26 |
v12.1.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v12.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.17.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.16.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.16.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v11.16.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.