Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 06:16 UTC
sagarpalsapure / orca-playwright-bridge
Drive Orca's embedded Chromium with Playwright (or raw CDP): multi-tab, device/media/offline emulation, and network mocking — by bridging its internal CDP proxy. Unofficial.
sagarpalsapure/orca-playwright-bridge holds a health index of 47 out of 100, placing it in the At risk band. It scores highest on Vitality (72/100) and lowest on Community & Adoption (26/100). It was last updated 6 days ago. A single contributor accounts for most of its recent work.
47
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
47
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
sagarpalsapurePersonal account
0 followers5 public repossince May 2018
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | orca-playwright-bridge | 1.6.0 | 2,980 | 17 | 5 days ago | orcaplaywrightcdpchrome-devtools-protocolbrowser-automation |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
72
Development activity
53Moderate
How it's scored
| 36/36 | Push recency — last push 6 days ago |
| 2.1/36 | Commit cadence — 3/52 weeks with commits |
| 14.8/18 | Commit volume — 43 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 43 |
| human_commit_share | 1 |
| days_since_last_push | 6 |
| active_weeks_last_year | 3 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 14 releases published |
| 36/36 | Release recency — latest release 6 days ago |
| 27/27 | Release cadence — a release every ~1.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 14 |
| latest_release_tag | v1.6.0 |
| releases_from_tags | no |
| days_since_latest_release | 6 |
| mean_days_between_releases | 1.8 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
26
Popularity & adoption
8Critical
How it's scored
| 7.7/60 | Stars — 4 stars |
| 0/25 | Forks — 1 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 1 |
| stars | 4 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 22.5/22.5 | README |
| 0/22.5 | License — no license file detected |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
58Moderate
How it's scored
| 46.3/80 | Monthly downloads — 2,980 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | orca-playwright-bridge |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,980 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
32
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
35At risk
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 0/25 | Owner reach — 0 followers of sagarpalsapure |
| 17.7/25 | Track record — 5 public repos, account ~8 yr old |
Inputs used
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | sagarpalsapure |
| public_repos | 5 |
| account_age_days | 2,982 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 5 days ago |
| 20/20 | Version history — 17 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | orca-playwright-bridge |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Engineering Quality
Are baseline engineering and documentation practices in place?
62
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://www.npmjs.com/package/orca-playwright-bridge |
| 10/10 | Repository description |
| 10/10 | Topics — 7 topics |
| 0/10 | Wiki |
Inputs used
| topics | browser-automation, cdp, chrome-devtools-protocol, e2e-testing, orca, playwright, web-automation |
| has_wiki | no |
| homepage | https://www.npmjs.com/package/orca-playwright-bridge |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
43
Security posture
29Critical
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | License — license file not detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 1/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 2.9 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 5 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:orca-playwright-bridge@1.6.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
44
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 43 of 43 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 43 of the last 43 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 2/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 1 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — JavaScript without a type-check config |
| 55/55 | Manageable file sizes — 0/17 source files over 60KB |
Inputs used
| primary_language | JavaScript |
| largest_source_bytes | 43,595 |
| source_files_sampled | 17 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
4GitHub stars
1contributors
43commits, last 12 months
6days since last push
14releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 2.9 / 10
2.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| 2 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 2 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 3
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | chrome-remote-interface | ^0.33.3 | package.json |
| npm | playwright-core | ^1.61.1 | package.json |
| npm | ws | ^8.0.0 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:orca-playwright-bridge@1.6.0 pulls in 5 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"browser-automation",
"cdp",
"chrome-devtools-protocol",
"e2e-testing",
"orca",
"playwright",
"web-automation"
],
"is_fork": false,
"size_kb": 184,
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/orca-playwright-bridge",
"languages": {
"Shell": 5607,
"JavaScript": 136451
},
"pushed_at": "2026-07-17T19:28:05Z",
"created_at": "2026-06-29T18:58:50Z",
"owner_type": "User",
"updated_at": "2026-07-17T19:28:24Z",
"description": "Drive Orca's embedded Chromium with Playwright (or raw CDP): multi-tab, device/media/offline emulation, and network mocking — by bridging its internal CDP proxy. Unofficial.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "sagarpalsapure",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/39594947?v=4",
"created_at": "2018-05-24T15:02:24Z",
"is_verified": null,
"public_repos": 5,
"account_age_days": 2982
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-07-17T19:34:54Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2026-07-05T12:07:17Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-07-05T11:53:17Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-07-03T10:58:11Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-07-03T10:26:31Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-07-03T09:32:51Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-07-02T19:17:26Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2026-07-01T20:12:35Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-07-01T19:54:49Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2026-07-01T19:20:53Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2026-07-01T18:11:50Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-06-29T20:29:13Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-06-29T20:05:10Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-06-29T19:40:23Z"
}
],
"recent_commits": [
{
"oid": "292cd9b0613c0e32575c0f4e0382dc39b7e23470",
"body": "Orca reclaims the CDP debug port of a tab whose renderer has been\nbackgrounded and left idle, so a pre-existing tab can be listed yet\nexpose no endpoint. attachOrcaTab(pageId) now focuses such a tab to\nrevive its renderer and waits for the port before attaching, so\nattaching to a dormant tab \"just w\n[…]\nintForPageId), README limits,\n SKILL traps, CHANGELOG updated. New enhancements test. Suite: 46 tests,\n 41 pass, 0 fail, 5 skip.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(attach): auto-activate idle tabs + all-worktree endpoint resolution",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-17T19:26:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "623ca16ac762916ae210c7f35a217e5b9b680079",
"body": "Discovery/connect:\n- curl-free, concurrent CDP port discovery via Node core http\n- exponential-backoff polling for tab open/switch\n- conn.reattach() to recover from the one-client-per-tab trap\n- orcaVersion()/versionGte(); version-aware reload()\n\nCapabilities:\n- openOrcaTab({ isolated }) — fresh iso\n[…]\nts. Version 1.6.0 across package.json + plugin manifests.\nNew test/enhancements.test.js. Suite: 45 tests, 40 pass, 0 fail, 5 skip.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: re-verify against Orca 1.4.144 + smoothness enhancements (v1.6.0)",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-17T19:07:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5bec35a1a9e145a3410f03090a0dbb8a021f0882",
"body": "Bumps package + plugin manifests to 1.5.2, CHANGELOG entry, README release line.\nThe functional fix (orca-browser -> orca-automation in commands/orca.md) landed\nin f9bea6f; this cuts it as a published patch.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.5.2 — fix /orca command's stale orca-browser skill reference",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-05T12:06:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f9bea6fc626402211fa4122ad717f167594c79db",
"body": "…a-browser)\n\nThe orca-browser skill was renamed to orca-automation in v1.5.0, but the\n/orca command still told the agent to lean on orca-browser — a skill that no\nlonger exists. Both references corrected.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(/orca): point at the renamed orca-automation skill (was stale orc…",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-05T12:05:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2638b9ee010575657d1edab4452f403639779bd7",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "plugin: bump marketplace + plugin manifests to 1.5.1",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-05T11:58:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9a13696ef99ffa490005b59a5a96a1837bbe397f",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: show current release (v1.5.1) in README install section + badges",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-05T11:54:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "19b514c6e361cafaeb45ddc9b9160a42c9b83c65",
"body": "… upstream\n\nRe-verified the whole bridge against Orca 1.4.123 (docs were stamped 1.4.120).\n\nTwo upstream limitations Orca fixed:\n- Page.printToPDF now works (#7032) — added orca.pdf(path?, opts?) to the\n raw-CDP driver + types + a capability test asserting real %PDF- bytes.\n- Profile storage isolat\n[…]\nied docs 1.4.120 -> 1.4.123 (mobile/tracing/dialog docs left\nat 1.4.120 — not re-run this pass). Suite: 33 pass / 0 fail / 5 skip.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.5.1 — Orca 1.4.123 re-verify: page.pdf() + profile isolation fixed…",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-05T11:51:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e47035177f379700df261f2110f0263a46713511",
"body": "…ser skill references\n\nOne package, two surfaces, unified by Orca as the host.\n\nMobile (new): orca-playwright-bridge/maestro drives native apps with Maestro,\npointed at the device Orca manages.\n- iosMaestro() / androidMaestro() + a fluent Flow builder, hierarchy(), screenshot()\n- Opens the device in\n[…]\nulation recipe live).\n\nDocs: README + manifests reworded to the unified browser+mobile story;\nmaestro/mobile keywords added. No JS API breakage.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.5.0 — mobile automation (Maestro, iOS+Android) + skill reorg; brow…",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-03T18:18:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b5c357c88adf1c5e5fe0c05aef37b4e29cea0721",
"body": "Two independent drivers could end up driving each other's tab because\ndefault discovery fell back to \"the first/active endpoint\", which flips\nwhenever any session opens or focuses a tab.\n\n- discoverCdpUrl() throws with the tab list when >1 tab is open and none\n was specified, instead of silently gr\n[…]\nve). close() leaves the tab open.\n- openOrcaTab() resolves its port by the created browserPageId (URL join)\n rather than a racy port-set diff.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.2.3 — fix multi-session cross-driving; add attachOrcaTab()",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-03T10:57:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "481c5305f769fe09ea30009c220cc9184525bb7d",
"body": "Fulfill matching real requests with a canned status/headers/body via CDP\nFetch.fulfillRequest while passing the rest through — the reliable\nalternative to Playwright route.continue(), which hangs across the bridge.\nTyped, tested (30/30 against Orca 1.4.120), documented.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.2.2 — add mockResponse() to the raw-CDP driver",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-03T10:26:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "23391b85e1d35cebf3e414b7ef0b89c0ee9a3484",
"body": "Orca 1.4.120 fixes page.reload() (previously closed the tab, #7031) — verified\nit now reloads the document and keeps the tab. Updated the README limits, the\norca-browser skill trap table, and the /orca command gotchas to reflect the fix\n(reload() helper kept as a fallback for Orca < 1.4.120).\n\nRe-ve\n[…]\nge.pdf (#7032), newCDPSession (#7033), fill-focus (#7035). No new verbs since\n1.4.117. README re-stamped to v1.4.120. Tests 29/29.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.2.1 — Orca 1.4.120 fixed page.reload(); docs re-verified",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-03T09:32:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2381303749d9168fd682f177b1db4fd34898b98a",
"body": "Orca 1.4.117 adds new browser CLI verbs — expose the useful ones on orcaTabs():\n- acceptDialog(text?) / dismissDialog() — handle alert/confirm/prompt (was a\n hard blocker before; dismiss no-ops safely when no dialog is open)\n- getStorage/setStorage/clearWebStorage (native, { session } for sessionSt\n[…]\n7035 all still hold). README re-stamped to v1.4.117.\n\nVersion bumped to 1.2.0. Tests 29/29; new .d.ts type-checked under --strict.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Orca 1.4.117 verbs (dialogs, storage, highlight, download, exec)",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-02T19:14:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "025cc09c1e6ba605c62b62e19f9128af9a043982",
"body": "npm's Install box isn't editable, so make the README (rendered below it on npm)\nstate plainly: npm i = library only; npx orca-playwright-bridge setup = full\ninstall. Republish so the npm page picks up the updated README.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.1.1 — blunt install messaging in README",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T20:08:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8a33a755a165490f2151e3851364b2d177fdf3f7",
"body": "Add bin/cli.js with a 'setup' subcommand: npx orca-playwright-bridge setup\ninstalls the package (+deps) into ~/.orca-playwright-bridge, symlinks the\norca-cdp CLI + libs into ~/.local, and installs the /orca command — the whole\nthing in one command, from npm. get.sh remains the npm-free (curl|bash) path.\n\nMinor bump: consolidates the /orca simplification + get.sh + this installer.\nTests: 27/27.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.1.0 — one-command install: npx orca-playwright-bridge setup",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T19:54:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ccfd013c2bba1d3640b530ebb6698a86c974b263",
"body": "get.sh clones into ~/.orca-playwright-bridge and runs install.sh — a single\ncommand for a new user, no npm/clone steps. Re-run to update. README gets a\nQuickstart one-liner + install-table row.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add one-command curl|bash installer (get.sh)",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T19:42:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d47d35d6bdaea727fe878a22608b6cbc9b62c753",
"body": "One plain-language command instead of three. Detailed playbook + traps live in\nthe orca-browser skill and README. Updated plugin/marketplace descriptions and\nREADME references.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify to a single /orca command; remove /orca-pw and /orca-test",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T19:38:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6607796850d418c304e8616282bbd6cc8b7a173f",
"body": "/orca-pw and /orca-test are the detailed commands; /orca is the simple everyday\none — describe the task, it drives Orca's browser. Heavy detail stays in the\norca-browser skill.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add simple /orca command (everyday one-liner)",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T19:34:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "88bfbb1936909a451c83ec0fb411417b0896c595",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add by-audience install breakdown to Install section",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T19:27:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4ef86db8b2e45910d198d6f495de0e7721060e5b",
"body": "Ship the bridge as a Claude Code plugin:\n- skills/orca-browser/SKILL.md — auto-invoked skill that teaches an agent the\n capability map AND the verified traps (click-then-fill, reload-closes-tab,\n popups->waitForNewTab, route->blockRequests, iframes read-only, no page.pdf,\n profile-isolation bug),\n[…]\nrNewTab, activate(), blockRequests,\nrecordScreencast, openOrcaTab focus, fullPageScreenshot cap, and the iframe fix.\nTests: 27/27.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.0.7 — Claude Code plugin + skill; upgraded commands",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T19:20:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a37a49c87464357b85420e028b68b947f005159e",
"body": "The #3 iframe fix. swapFrameIds rewrote `frameId`/`id` from Orca's real\nmain-frame id to the targetId, but NOT the parent-reference keys (`parentId` in\ngetFrameTree childFrames, `parentFrameId` in Page.frameAttached). So child\nframes pointed at the main frame by its real id — which Playwright knows \n[…]\nutable one — so this is read-only. Documented; network-free regression test\n(srcdoc iframe). Main-frame behavior unchanged: 27/27.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: expose child <iframe>s to Playwright (frameLocator reads work)",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T19:10:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3724eaf243cada642482d200f57217a6885b018d",
"body": "Orca opens 'orca tab create' tabs in the background, so you had to manually\nswitch to watch a script run. openOrcaTab() now runs 'tab switch --focus' on the\nnew tab by default (opt out with { focus: false }). Also expose\norcaTabs().byId(id).activate() to foreground any tab on demand.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "openOrcaTab() focuses the new tab by default; add activate()",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T18:58:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49de610077e0ed4310a2aa1acd7d22faf9f1ce48",
"body": "New features (verified live + regression-tested):\n- waitForNewTab(action) — capture a page-spawned popup / target=_blank tab and\n drive it via the native orcaTabs() driver. (Playwright can't attach: Orca\n exposes no CDP endpoint for page-spawned tabs, even when switched to.)\n- connectOrca().record\n[…]\n concurrent evalAll + 3 concurrent bridges — no races/port\n exhaustion.\n\nTests: 26/26. Docs + CHANGELOG updated. No version bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add waitForNewTab() + recordScreencast(); iframe/stress findings",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T18:53:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2ef3e62c5e55256094c5b4499c4bdc6f2acb0649",
"body": "Parts 4-6 of live testing (Wikipedia + the-internet.herokuapp.com) exercised the\nfull remaining surface. Two real limitations found and documented:\n- child <iframe>s aren't exposed to Playwright (page.frames() = main only);\n same-origin workaround via contentDocument in a main-world evaluate.\n- pop\n[…]\nuth, file upload, concurrent multi-tab). Added an\n[Unreleased] CHANGELOG section (blockRequests + fullPageScreenshot fix + these).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: record iframe + popup limits from exhaustive live testing",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T18:39:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0799e0ae12b2869de1005e1905e635d9c5a03e18",
"body": "Live testing on the-internet.herokuapp.com surfaced that Playwright's\npage.route() continue()/abort() hangs on real requests through the bridge\n(Network<->Fetch correlation breaks across the proxy's session/frame\nrewriting). route.fulfill() (pure mock) still works.\n\nRaw-CDP Fetch, however, works ful\n[…]\nipping CSS from a real login page. README limits + capability\nlist updated; regression test added.\n\nTests: 24/24. No version bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add blockRequests() raw-CDP interception; document page.route limitation",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T18:29:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c7110089f8301a4c59ee0f2173c948d60faa2ead",
"body": "Chrome's Page.captureScreenshot silently returns empty data past its ~16384px\nmax dimension. Live testing on a 36,692px Wikipedia article hit this. Cap the\nclip to 16384 so ultra-tall pages capture the top 16384px instead of nothing.\nRegression test uses a 20000px page.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix fullPageScreenshot() returning 0 bytes on very tall pages",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T18:19:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "17d6e7c400b52b4982779cdf8ca25db4824f3aaa",
"body": "This is the release that carries everything built since 1.0.5 to npm:\nTypeScript declarations, orcaTabs().evalAll(), and the connectOrca() raw-CDP\npower tools (console/network/cookies/storage/emulate/axTree/metrics/HAR/\nfull-page & MHTML capture).\n\nPolish added in this release:\n- Safe reload() on th\n[…]\n sleep.\n- examples/ — multi-tab, login-form, device-screenshot (runnable).\n- CHANGELOG.md (shipped in the package).\n\nTests: 22/22.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.0.6 — ship TypeScript types + raw-CDP tools to npm; polish bundle",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T18:09:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4653a46f0e1de32f6efaa707b3e54d0aa89dcff9",
"body": "node --test expands ** globs only on v22, so the quoted glob failed on 18/20\n('Could not find'). Use a shell-expanded test/*.test.js (files are flat), and\ndrop Node 18 (its test runner predates --test-concurrency).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: fix cross-Node test glob; matrix 20/22",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T18:02:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "28a09f35c907e0af31aedf67fcf3cbe353945692",
"body": "Node 18/20/22 matrix: npm ci, module-load smoke, npm test (the integration\nsuite auto-skips without Orca -> green), plus a job that type-checks the new\n.d.ts against a consumer under --strict.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add skip-aware GitHub Actions workflow",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T17:58:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "84977c2eb4768a5b313ac227a23dff22d2dcb6f3",
"body": "Types (biggest DX gap — package shipped to npm with none):\n- index.d.ts (main/bridge) + connect.d.ts (raw-CDP driver), wired via\n package.json \"types\" + per-subpath exports conditions. Type-checked under\n --strict against a consumer.\n\nConcurrency honesty fix:\n- orcaTabs() per-verb methods are sync\n[…]\ngetDOMCounters), and recordNetwork().har() → HAR 1.2 log.\n\nTests: 21/21 (added evalAll, storage round-trip, HAR). No version bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add TypeScript types, storage+HAR helpers, and concurrent evalAll()",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T17:54:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6d36bb76460d7e03372dff07ff111a768825fcfb",
"body": "Orca's proxy answers ~35 CDP domains on the page socket — far more than the\nPlaywright path (whose newCDPSession is blocked). Wrap the high-value ones on\nthe raw-CDP driver, all verified live:\n\n- captureConsole() — console messages + uncaught JS errors (events flow)\n- recordNetwork() — request/re\n[…]\n — Performance.getMetrics as a map\n\nNew suite test/raw-cdp.test.js (4 tests). Full suite 18/18. README updated.\nNo version bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add raw-CDP power tools to connectOrca()",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T17:41:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "72e1ae96dad8c1fd772f6ee1cd3c9a52b9ac4d15",
"body": "…61.1\n\nFeature release:\n- orcaTabs().find(locator, value, { action, text }) — semantic role/text/label\n find-and-act (survives navigation), and mouseMove/Down/Up/Wheel.\n- playwright-core floor -> ^1.61.1.\n- Re-verified all limits against Orca 1.4.114 (none fixed); filed upstream as\n stablyai/orca #7031-#7035 (+#6923) and linked from the README.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.0.5 — orcaTabs() find + mouse verbs (Orca 1.4.114), playwright ^1.…",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T17:27:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2b5a1e3a6be6098f928b7cb2cbea0e804eed2aad",
"body": "Filed the CDP-proxy limitations to stablyai/orca and cross-referenced them:\nreload #7031, printToPDF #7032, newCDPSession #7033, createTarget #7034,\nfocus/fill #7035 (storage isolation already tracked in #6923).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: link each documented limit to its upstream issue",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T17:24:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a9c547e2fb94e21c8a281ddc587d057ee8dad11b",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: sync package-lock to playwright-core ^1.61.1",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T17:14:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7423b6f30ac4254de19568eb847ad417dd0d8487",
"body": "Orca 1.4.114 adds new browser CLI verbs — expose them on orcaTabs():\n- find(locator, value, { action, text }) — semantic locator (role/text/label)\n find-and-act, like Playwright's getByRole(...).click(). Unlike snapshot refs,\n semantic locators survive navigation. Verified click path + regression \n[…]\nge.pdf, newCDPSession, fill-focus\n all unchanged). README re-stamped \"verified against v1.4.114\".\n\nTests: 14/14. No version bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add orcaTabs() find + mouse verbs (Orca 1.4.114); bump playwright floor",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-07-01T17:13:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "98f91411fffa302bd040ac56d51b2203a801a31d",
"body": "Patch release: raises orcaCli() execFileSync maxBuffer to 64MB so large\nscreenshots no longer throw ENOBUFS (fix already on main), plus README demo/\ntest/repro documentation. No API changes since 1.0.3.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.0.4 — fix ENOBUFS on large screenshots; docs",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-30T19:14:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4ac524c4e75c76403e4ebfcf51f7dfdc42237340",
"body": "Add Demo section (npm run demo), note the two test suites, and list the\ndemo/ test/ repro/ directories in 'What's inside'. No code/version change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document demo UI, capability tests, and repo layout",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-30T19:13:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f4ad7d3d50544209ad3b561ab4985c7bcd36516f",
"body": "orcaCli() ran `orca … --json` through execFileSync with the default 1MB\nbuffer. `orca screenshot` returns base64 image data that exceeds 1MB for a\ntall or retina page, throwing `spawnSync orca ENOBUFS` and killing the call\n(and any orcaTabs().screenshot()). Raise maxBuffer to 64MB.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix ENOBUFS on large screenshots via orcaCli()",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-30T19:10:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ba50b8e64b7e931e0928a57545fbdeacc8a5ba01",
"body": "Zero-dependency http server + UI that drives Orca's embedded browser through\nthe bridge: tabs, goto, eval, snapshot, screenshots, device/media/offline\nemulation, and a Playwright page.route() network-mock showcase.\n\n npm run demo # http://127.0.0.1:7799\n\nNot published to npm (files whitelist excludes demo/); repo-only. Version\nstays 1.0.3.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add live demo control panel (demo/)",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-30T18:57:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8c113a279c9b42976434f9b4c69e3724c7a8cdd5",
"body": "Verified against Orca v1.4.110; Playwright 1.5x via connectOverCDP.\n\nTests\n- test/bridge.test.js + test/capabilities.test.js: live integration suite\n (node --test, --test-concurrency=1). Skips cleanly when Orca is unreachable;\n otherwise opens throwaway data: tabs and asserts every entry point. `n\n[…]\nd profiles still share localStorage AND cookies. Reproducer in\n repro/profile-isolation.js; filed upstream as stablyai/orca#6923.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.0.3 — tests, expanded driver, emulation, verified capability matrix",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-30T18:50:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "96960fefd5cf1df1a5d113dd2bfa0acec0b58d2d",
"body": "Key discovery: each Orca tab exposes its OWN CDP endpoint on its own port\n(orca-cdp previously returned only the lowest, which looked single-tab).\n\n- { tab } now selects the matching tab by its per-tab CDP port (drops the\n non-working `orca tab switch` approach); concurrent multi-tab Playwright wor\n[…]\ns, findCdpUrlForTab\n- README: corrected (concurrent multi-tab works; verified Orca profiles do NOT\n isolate storage, so no incognito contexts)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.0.2 — multi-tab via per-tab CDP ports + openOrcaTab",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-29T20:28:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d450be3720d756df46e3d40facaec5742f94a6bd",
"body": "- connectOrcaPlaywright({ tab: /url/ }): switch the matching tab active via\n `orca tab switch`, then attach Playwright (targets a specific tab despite the\n single-target CDP proxy)\n- orcaTabs(): concurrent multi-tab driver over Orca's native CLI\n (orca eval/goto/snapshot/click/screenshot --page <browserPageId>)\n- README: clarify single active-tab proxy reality + document both paths\n- export orcaTabs, orcaTabList, switchToOrcaTab\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.0.1 — leverage the Orca CLI for multi-tab",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-29T20:04:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "32295332c195a6aa5ab47312a5ae2aa845f21870",
"body": "- package.json: repository/homepage/bugs, files allowlist, publishConfig\n (public), os gate (darwin/linux), root export\n- portability: replace hardcoded home paths with package-name requires\n (libs) and $HOME-relative requires (slash commands)\n- README: npm install + usage section\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Prepare for npm publish",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-29T19:08:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a0d127b5468ec0c5a10a20b07d4a8553824258b2",
"body": "Drive Orca's embedded Chromium browser with Playwright (or raw CDP) by\nbridging its internal, undocumented CDP proxy.\n\n- bin/orca-cdp: discover Orca's ephemeral CDP port\n- lib/orca-pw-bridge.js: CDP bridge enabling Playwright connectOverCDP\n- lib/orca-connect.js: lightweight raw-CDP driver\n- commands/: optional Claude Code slash commands (/orca-test, /orca-pw)\n\nReverse-engineered against Orca v1.4.102; unofficial.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Initial commit: orca-playwright-bridge",
"author_name": "Sagar Palsapure",
"author_login": "sagarpalsapure",
"committed_at": "2026-06-29T18:58:36Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 14,
"commits_last_year": 43,
"latest_release_at": "2026-07-17T19:34:54Z",
"latest_release_tag": "v1.6.0",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 3,
"days_since_latest_release": 6,
"mean_days_between_releases": 1.8
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 28,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "orca-playwright-bridge",
"exists": true,
"license": "MIT",
"keywords": [
"orca",
"playwright",
"cdp",
"chrome-devtools-protocol",
"browser-automation"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/orca-playwright-bridge",
"is_deprecated": false,
"latest_version": "1.6.0",
"repository_url": "https://github.com/sagarpalsapure/orca-playwright-bridge",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2980,
"first_published_at": "2026-06-29T19:31:50.864000Z",
"latest_published_at": "2026-07-18T20:27:24.353000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 1,
"stars": 4,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-03",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 43595,
"source_files_sampled": 17,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 5,
"malicious_count": 0,
"assessed_package": "npm:orca-playwright-bridge@1.6.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "chrome-remote-interface",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.33.3"
},
{
"name": "playwright-core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.61.1"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.0.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "sagarpalsapure",
"commits": 43,
"avatar_url": "https://avatars.githubusercontent.com/u/39594947?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "292cd9b0613c0e32575c0f4e0382dc39b7e23470",
"ran_at": "2026-07-24T06:16:29Z",
"aggregate_score": 2.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T19:28:24Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sagarpalsapure/orca-playwright-bridge",
"host": "github.com",
"name": "orca-playwright-bridge",
"owner": "sagarpalsapure"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"security": 43,
"vitality": 72,
"community": 26,
"governance": 32,
"engineering": 62
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 72,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"commits_last_year": 43,
"human_commit_share": 1,
"days_since_last_push": 6,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "43 commits in the last year",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 43
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 14,
"latest_release_tag": "v1.6.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 1.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "14 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 14
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 26,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 8,
"inputs": {
"forks": 1,
"stars": 4,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4 stars",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"packages": [
"orca-playwright-bridge"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2980
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,980 downloads/month across npm",
"points": 46.3,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2980,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 32,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 35,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "sagarpalsapure",
"public_repos": 5,
"account_age_days": 2982
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of sagarpalsapure",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "sagarpalsapure"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "5 public repos, account ~8 yr old",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 5
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"orca-playwright-bridge"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "17 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 17
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 62,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"browser-automation",
"cdp",
"chrome-devtools-protocol",
"e2e-testing",
"orca",
"playwright",
"web-automation"
],
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/orca-playwright-bridge",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/orca-playwright-bridge",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 43,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 29,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 2.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:orca-playwright-bridge@1.6.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:orca-playwright-bridge@1.6.0",
"assessed": 5
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 5,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 5,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 44,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "43 of 43 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 43,
"sampled": 43
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 1,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "43 of the last 43 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 43,
"sampled": 43
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 43595,
"source_files_sampled": 17,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/17 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T06:16:32.902303Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sagarpalsapure/orca-playwright-bridge.svg",
"full_name": "sagarpalsapure/orca-playwright-bridge",
"license_state": "absent",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.