registry / @piwitests/reporter / 0.11.0

@piwitests/reporter@0.11.0

Playwright reporter for sending test results to Piwi Dashboard

AI Security Review

scanned 7d ago · by lpm-firewall-ai

No confirmed malicious attack surface. This is a Playwright reporter that, when explicitly configured, submits test-run data and optional artifacts to a user-selected Piwi Dashboard server.

Static reason

One or more suspicious static signals were detected.

Trigger

A user configures the reporter with `serverUrl`/`PIWI_DASHBOARD_URL` and runs Playwright tests.

Impact

Configured test data, CI metadata, and Git metadata may be sent to the chosen dashboard; no covert collection, install-time execution, persistence, or remote payload execution was found.

Mechanism

configured test-result, metadata, and artifact upload

Rationale

Static inspection shows package-aligned, opt-in reporting behavior to a configured dashboard. Scanner signals arise from legitimate credential configuration, HTTP uploads, Git/CI metadata collection, and temporary retry storage.

Evidence

package.jsondist/public/reporter.jsdist/public/global-setup.jsdist/internal/config/env.jsdist/internal/transport/http-client.jsdist/internal/collect/metadata-collector.js

Network endpoints7

localhost:3000/api/auth/login/api/test-runs/setup/api/test-runs/submit/api/test-runs/upload

@piwitests/reporter@0.11.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code