← Home

puppeteer-core

npm Repository Homepage

A high-level API to control headless Chrome over the DevTools Protocol

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

mathiasgoogle-wombot

Keywords

puppeteerchromeheadlessautomation

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from google-wombot to GitHub Actions CI/CD with SLSA provenance attestation — this reflects a legitimate migration to automated, attested releases for the official puppeteer project. ai
semgrep semgrep:child-process-import AI (semgrep): puppeteer-core legitimately uses child_process to spawn ffmpeg for screen recording; this is a documented, expected feature of the package. ai
provenance no-provenance AI (provenance): Established Google-maintained package; lack of Sigstore provenance is not a meaningful risk signal here. ai
semgrep semgrep:base64-decode AI (semgrep): Decodes base64 binary data from Chrome DevTools Protocol event streams — standard, expected behavior for a browser automation library. Not a malicious payload risk. ai
semgrep semgrep:new-function-constructor AI (semgrep): Core Puppeteer feature for serializing user-supplied JS functions to execute in browser contexts (page.evaluate etc.). Intentional and documented API behavior, not a security risk. ai

Versions (showing 100 of 341)

Version Deps Published
23.5.2 6 / 7
23.5.1 6 / 7
23.5.0 6 / 7
23.4.1 6 / 7
23.4.0 6 / 7
23.3.1 6 / 7
23.3.0 6 / 7
23.2.2 6 / 7
23.2.1 6 / 7
23.2.0 6 / 7
23.1.1 6 / 7
23.1.0 6 / 7
23.0.2 5 / 7
23.0.1 5 / 7
23.0.0 5 / 7
22.15.0 5 / 7
22.14.0 5 / 7
22.13.1 5 / 7
22.13.0 5 / 7
22.12.1 5 / 7
22.12.0 5 / 7
22.11.2 5 / 7
22.11.1 5 / 7
22.11.0 5 / 7
22.10.1 5 / 7
22.10.0 5 / 7
22.9.0 5 / 7
22.8.2 5 / 7
22.8.1 5 / 7
22.8.0 5 / 7
22.7.1 5 / 6
22.7.0 5 / 6
22.6.5 5 / 6
22.6.4 5 / 6
22.6.3 5 / 6
22.6.2 5 / 6
22.6.1 5 / 6
22.6.0 5 / 6
22.5.0 5 / 6
22.4.1 6 / 6
22.4.0 6 / 6
22.3.0 6 / 6
22.2.0 6 / 6
22.1.0 6 / 6
22.0.0 6 / 6
21.11.0 6 / 6
21.10.0 6 / 6
21.9.0 6 / 6
21.8.0 6 / 6
21.7.0 6 / 6
21.6.1 6 / 6
21.6.0 6 / 6
21.5.2 6 / 6
21.5.1 6 / 6
21.5.0 6 / 4
21.4.1 6 / 4
21.4.0 6 / 4
21.3.8 6 / 4
21.3.7 6 / 4
21.3.6 6 / 4
21.3.5 6 / 4
21.3.4 6 / 4
21.3.3 6 / 4
21.3.2 6 / 4
21.3.1 6 / 3
21.3.0 6 / 4
21.2.1 6 / 4
21.2.0 6 / 4
21.1.1 6 / 3
21.1.0 6 / 3
21.0.3 6 / 3
21.0.2 6 / 3
21.0.1 6 / 3
21.0.0 6 / 3
20.9.0 6 / 2
20.8.3 6 / 2
20.8.2 6 / 2
20.8.1 6 / 2
20.8.0 6 / 2
20.7.4 6 / 2
20.7.3 6 / 2
20.7.2 6 / 2
20.7.1 6 / 2
20.7.0 6 / 2
20.6.0 6 / 2
20.5.0 6 / 2
20.4.0 6 / 2
20.3.0 6 / 2
20.2.1 6 / 2
20.2.0 6 / 2
20.1.2 6 / 2
20.1.1 11 / 2
20.1.0 11 / 2
20.0.0 11 / 2
19.11.1 11 / 2
19.11.0 11 / 2
19.10.1 11 / 2
19.10.0 11 / 2
19.9.1 11 / 2
19.9.0 11 / 2
Showing 100 of 341 Next page →