karma-edge-launcher
A Karma plugin. Launcher for Microsoft Edge.
9
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
nicolasmccurdywatilde
Keywords
karma-pluginkarma-launchermicrosoftedge
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Package is 10 years old with 37k weekly downloads; version 0.0.0 reflects an early legitimate release, not a throwaway malicious package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Tiny payload and minimal README are consistent with an early-stage v0.0.0 of a legitimate Karma launcher plugin with a long track record. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change to nicolasmccurdy is legitimate — Nick McCurdy is the listed author in package.json and the GitHub repo is under nickmccurdy org, confirming intentional ownership transfer. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainer nicolasmccurdy is the package author per package.json; consistent with legitimate ownership transfer. | ai | |
| phantom-deps | phantom-dep:edge-launcher | AI (phantom-deps): edge-launcher is the core runtime dependency for this Edge launcher plugin; phantom detection is a false positive here as it may be used indirectly via config. | ai |