playwright

Maintainerscaution

The package has five publishing accounts and is clearly Microsoft-backed, making organizational handoff plausible. Two consumer-domain accounts, pavelfeldman and yurys, are a minor account-hygiene concern but do not indicate a thin maintenance team.

Workflow auditcaution

All 21 workflows were analyzed with no untrusted checkout or script-injection findings, and action references are fully pinned. However, high-confidence template-injection, github-app, and secrets-inherit findings expose workflow hygiene concerns; the low-confidence cache findings are only secondary evidence.