puppeteer

A high-level API to control headless Chrome over the DevTools Protocol

Latest 25.13.0

NPM

94%

Total Score

healthy

Long-lived, actively maintained release with strong repository, licensing, provenance, and workflow hygiene.

Are you affected? Scan for Free

Health Score Breakdown

Lifecycle scripts

The package uses postinstall and prepack scripts, and its README explains that installation downloads a compatible browser. This is an expected part of Puppeteer's operation but requires care in restricted or locked-down builds.

Vulnerabilities

Title	Versions	Severity
CVE-2019-5786 puppeteer is vulnerable to Use After Free in versions 0.0.0 - 1.13.0.	0.0.0 - 1.13.0	Medium

Package versions

Maintainers

mathias

google-wombot

Direct Dependencies

Dependency	Last Release	Score
lilconfig Version ^3.1.3	—	—
chromium-bidi Version 157.0.8090-0	—	—
puppeteer-core Version 25.13.0	—	—
devtools-protocol Version 0.0.1696802	—	—
@puppeteer/browsers Version 3.2.4	—	—