chromedriver

Lifecycle scriptscaution

The package runs an install script that downloads or prepares ChromeDriver binaries. This is expected for an NPM wrapper, but it increases installation-time supply-chain and reproducibility sensitivity.

Repo bus factorcaution

One contributor made all 19 commits in the last 3 months, giving the project a complete single-person bus factor. That is a meaningful continuity risk despite the recent activity.

Repo toolingcaution

The repository uses TypeScript-based build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of abandonment.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, although the active release history and repository tests provide some compensating evidence.

Workflow auditcaution

All 24 analyzed action references are unpinned, and the audit found a high-confidence archived action. A workflow using untrusted checkout with a workflow_run trigger also warrants caution; the low-confidence cache findings are hygiene concerns only.