registry / @piwitests/reporter / 0.9.0

@piwitests/reporter@0.9.0

Playwright reporter for sending test results to Piwi Dashboard

AI Security Review

scanned 9d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime behavior is a Playwright reporter that sends test metadata, reports, traces, and attachments to a user-configured Piwi Dashboard server.

Static reason

One or more suspicious static signals were detected.

Trigger

User configures @piwitests/reporter in Playwright and runs tests

Impact

Package-aligned submission of test run data to configured serverUrl

Mechanism

dashboard reporting and optional file uploads

Rationale

Static source inspection shows a Playwright dashboard reporter with runtime, user-configured network submission and local temp recovery files, not install-time execution, hidden persistence, credential harvesting, or unauthorized control-surface mutation. The scanner hits are explained by package-aligned env auth options, HTTP client code, git/CI metadata collection, and report/trace upload functionality.

Evidence

package.jsondist/index.jsdist/internal/config/env.jsdist/internal/transport/http-client.jsdist/public/reporter.jsdist/public/global-setup.jsdist/internal/submit/uploader.jsdist/internal/collect/metadata-collector.jsdist/internal/files/file-handler.jsdist/internal/streaming/stream-buffer.jsdist/internal/streaming/crash-recovery.jsdist/internal/support/setup-file.js

@piwitests/reporter@0.9.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code