appium-chromedriver

Lifecycle scriptscaution

A prepare script runs during installation or package preparation. This is a modest supply-chain surface, but the available artifact and repository evidence provide no indication that it is unsafe.

Maintainerscaution

Five accounts have publish access, with two using the Sauce Labs domain and three consumer email accounts: jlipps, nick.mokhnach, and kazucocoa. The company-backed project makes the mixed account hygiene a minor concern, not evidence of limited maintenance capacity.

Repo bus factorcaution

The top contributor made about 82% of the 11 recent commits, creating concentration risk. However, two additional contributors remained active and the repository is organization-owned, which partly compensates.

Workflow auditcaution

All 14 workflows were analyzed with no audit findings, unsafe checkouts, or script injections. However, all 43 action references are unpinned and three workflows grant top-level write permissions, creating workflow hygiene and token-scope concerns.