# Browser CLI third-party packages

The CLI source package does not vendor these dependencies. `npm ci
--ignore-scripts` retrieves the exact integrity-pinned archives recorded in
`package-lock.json` after the owner reviews the configured registry.

| Package | Locked version | License | Source |
|---|---:|---|---|
| `playwright` | 1.62.1 | Apache-2.0 | <https://github.com/microsoft/playwright> |
| `playwright-core` | 1.62.1 | Apache-2.0 | <https://github.com/microsoft/playwright> |
| `@axe-core/playwright` | 4.10.2 | MPL-2.0 | <https://github.com/dequelabs/axe-core-npm> |
| `axe-core` | 4.10.3 | MPL-2.0 | <https://github.com/dequelabs/axe-core> |
| `fsevents` (optional macOS dependency) | 2.3.2 | MIT | <https://github.com/fsevents/fsevents> |

`npm run install-browser -- --dry-run` prints the exact headless Chromium and
FFmpeg download URLs without downloading them. Review those recipients and the
applicable terms before running `npm run install-browser`.