← Home

chromium-bidi

npm Repository Homepage

An implementation of the WebDriver BiDi protocol for Chromium implemented as a JavaScript layer translating between BiDi and CDP, running inside a Chrome tab.

37
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

mathiasgoogle-wombot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Google's chromium-bidi migrated from google-wombot bot account to GitHub Actions OIDC publishing — a standard, expected transition for Google OSS packages. SLSA provenance attestation confirms legitimate CI/CD origin. ai
semgrep semgrep:base64-decode AI (semgrep): Base64 decode is a legitimate utility in a WebDriver BiDi implementation for encoding/decoding protocol data. The code is transparent and non-obfuscated. ai
phantom-deps phantom-dep:puppeteer AI (phantom-deps): puppeteer is a runtime dep in package.json; phantom-dep fires because it's not directly imported in source, consistent with config-level integration in this Chrome automation library. ai

Versions (showing 37 of 137)

Version Deps Published
0.5.1 2 / 46
0.5.0 2 / 46
0.4.34 2 / 46
0.4.33 2 / 45
0.4.32 2 / 45
0.4.31 2 / 45
0.4.30 2 / 45
0.4.29 2 / 45
0.4.28 2 / 45
0.4.27 2 / 45
0.4.26 1 / 45
0.4.25 1 / 45
0.4.24 1 / 45
0.4.23 1 / 45
0.4.22 1 / 45
0.4.21 1 / 45
0.4.20 1 / 45
0.4.19 1 / 45
0.4.18 1 / 45
0.4.17 1 / 44
0.4.16 1 / 43
0.4.15 1 / 43
0.4.14 1 / 43
0.4.13 1 / 43
0.4.12 1 / 43
0.4.11 1 / 43
0.4.10 1 / 44
0.4.9 1 / 43
0.4.8 1 / 42
0.4.7 1 / 40
0.4.6 1 / 39
0.4.5 1 / 38
0.4.4 1 / 38
0.4.3 0 / 40
0.4.2 8 / 23
0.1.2 8 / 23
0.0.0 8 / 23