@playwright/test

Maintainerscaution

Five publishing accounts are associated with a Microsoft-backed package, including three using microsoft.com addresses. The two Gmail publishing accounts, pavelfeldman and yurys, are an account-hygiene caution, not evidence of limited maintenance capacity.

Workflow auditcaution

All 21 workflows were analyzed with no untrusted checkout or script-injection findings, and all 79 action references are pinned. High-confidence findings involving blanket GitHub App permissions, inherited secrets, and template injection remain workflow-hygiene cautions, while the cache findings are low-confidence.