registry / @bigbinary/neeto-playwright-reporter / 4.0.2
@bigbinary/neeto-playwright-reporter@4.0.2
The custom playwright reporter for neeto-playwright-dashboard.
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe high static signals resolve to reporter HTTP setup, a command helper, and a user-invoked Playwright wrapper. The inspected excerpts show no concrete attack behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing the reporter or explicitly invoking the neetoplaydash CLI with the playwright command.
Impact
No concrete malicious data collection or exfiltration was established from the inspected source.
Mechanism
The reporter configures requests to the dashboard service with project and API key headers. The CLI forwards Playwright arguments to the local Playwright executable; a helper executes a supplied command and returns its output.
AI rationale
The high static signals resolve to reporter HTTP setup, a command helper, and a user-invoked Playwright wrapper. The inspected excerpts show no concrete attack behavior.
Evidence
package.jsonindex.cjs.jsbin/neetoplaydash.mjs
Network endpoints1
connect.neetoplaydash.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to reporter entrypoints and defines prepare only as Husky setup.
- The reporter sends API requests to its named dashboard service and uses project and API key headers.
- The CLI runs only when invoked with the Playwright command and forwards arguments to the local Playwright CLI.
- The command execution helper returns output or logs a warning; inspected code does not show it being sent as telemetry.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
5 flaggedindex.cjs.jsView file
1"use strict";Object.defineProperty(exports,"__esModule",{value:!0});var e=require("os"),t=require("domain"),n=require("fs"),i=require("path"),o=require("util"),a=require("url"),r=r...
L2: /*!
High
1"use strict";Object.defineProperty(exports,"__esModule",{value:!0});var e=require("os"),t=require("domain"),n=require("fs"),i=require("path"),o=require("util"),a=require("url"),r=r...
L2: /*!
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
index.cjs.jsView on unpkg · L11"use strict";Object.defineProperty(exports,"__esModule",{value:!0});var e=require("os"),t=require("domain"),n=require("fs"),i=require("path"),o=require("util"),a=require("url"),r=r...
L2: /*!
...
L7: */
L8: function(e){var t,n,o,a=Ue.exports,r=i.extname,s=/^\s*([^;\s]*)(?:;|\s|$)/,c=/^text\//i;function u(e){if(!e||"string"!=typeof e)return!1;var t=s.exec(e),n=t&&a[t[1].toLowerCase()];...
L9: /*! https://mths.be/wtf8 v1.0.1 by @mathias */Hp=Gp,$p=Gp.exports,function(e){var t=$p,n=Hp&&Hp.exports==t&&Hp,i="object"==typeof E&&E;i.global!==i&&i.window!==i||(e=i);var o,a,r,s...
Findings
6 High3 Medium6 Low
HighChild Processindex.cjs.js
HighShell
HighSame File Env Network Executionindex.cjs.js
HighCommand Output Exfiltrationindex.cjs.js
HighCross File Remote Execution Contextbin/neetoplaydash.mjs
HighTrigger Reachable Command Output Exfiltrationindex.cjs.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @bigbinary/neeto-playwright-reporter@4.0.2.
See all versions of @bigbinary/neeto-playwright-reporter for other recorded verdicts.
- Review the evidence and your use of @bigbinary/neeto-playwright-reporter@4.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.