registry / @piwitests/reporter / 0.12.0

@piwitests/reporter@0.12.0

Playwright reporter for sending test results to Piwi Dashboard

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a configured Playwright reporter that submits opted-in test results and optional artifacts to its dashboard server.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User configures the reporter with serverUrl and runs Playwright tests.

Impact

Configured dashboard receives test metadata, results, and explicitly enabled report or trace artifacts.

Mechanism

Collect Playwright results and POST them to the configured Piwi Dashboard API.

Rationale

Source inspection supports the documented reporter behavior rather than a covert payload: network activity is gated by user configuration and targets the configured dashboard. The static signals reflect expected credential configuration, test-artifact upload, temporary state, and limited git metadata collection.

Evidence

package.jsondist/public/reporter.jsdist/internal/transport/http-client.jsdist/internal/submit/uploader.jsdist/internal/collect/metadata-collector.jsdist/internal/capture/capture-fixtures.jsdist/internal/support/setup-file.js

Network endpoints1

localhost:3000

@piwitests/reporter@0.12.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code