@setsquare/review-cli
v0.11.0
Published
The setsquare CLI: project setup and read-only coverage auditing for Playwright suites. Installed transitively by @setsquare/review-sdk, so one install links the setsquare binary.
Maintainers
Readme
@setsquare/review-cli
The setsquare command-line interface.
npx setsquare help lists every command.
- Read your repository:
auditanddoctor. - Change it:
initadds Setsquare to your Playwright configs, andchangedwrites the routes a change can reach. - Read a run the SDK wrote:
findings,sarif,reportandscreens. - Re-scan one surface:
verifysays what still fires. - Fold a run's shards into one run:
mergedoes this wherever the shards ran. It needs@setsquare/review-sdkinstalled in the project, because the merge is the SDK's own.
Naming
The brand is Setsquare, written in full everywhere — there is no short form.
Everything a human types is setsquare. That rule is enforced here by the binary
name and nowhere else, so it cannot rot.
Dependency budget
Zero runtime dependencies, today and preferably forever. The CLI parses a small number of subcommands; that does not need an argument-parsing library.
Reporting a problem
Bugs, questions and security reports all go to https://setsquare.dev/report, which files a tracked issue directly. There is no public issue tracker — this repository is private — so the form is the whole route in, and it is watched.
Not open to outside contributions yet. The source is not published pre-1.0, so there is nowhere to send a pull request. That is a deliberate position rather than an oversight, and it will be revisited.
Licence
Apache License 2.0 — see LICENSE and NOTICE. Use,
modify, vendor, mirror and redistribute freely, provided you retain the notices,
state your changes and pass on the NOTICE. Express patent grant; trademarks
reserved.
OSI-approved, but this is not an open-source project — the repository is private
and the package ships built output, so "Apache-2.0 licensed" is the accurate
phrase. (Decision P0-D3, revised 2026-09-08 from the Elastic License 2.0; its
hosted-service restriction no longer applies.)
