
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@playwright-opentelemetry/trace-viewer
Advanced tools
Playwright OpenTelemetry Trace Viewer - A web application for viewing Playwright Opentelemetry test traces
A trace viewer designed around tests, part of Playwright OpenTelemetry. A hosted copy runs at trace.endform.dev.

The viewer reads OpenTelemetry trace data directly rather than a proprietary test-result format. The layout uses a time-aligned flame graph with a screenshot filmstrip above it, separated into three views that match how you investigate a failure:
Console messages and uncaught browser errors appear as span events on the timeline. You can search span names and attributes, inspect span details and events, jump between errors, and zoom into a time range, while the screenshots stay synchronized with the timeline and grouped by browser context and page.
To boot the trace viewer on localhost:9294:
npx @playwright-opentelemetry/trace-viewer
The viewer can load a local trace zip or a trace-specific API base URL such as /playwright-otel-trace-viewer/v1/{traceId}. Remote API loading fetches {baseUrl}/traces once for the merged OTLP export, derives test metadata from the root playwright.test span, then downloads {baseUrl}/screenshots.zip into the service worker when screenshots are needed.
If the viewer URL includes traceToken, the token is propagated to remote Trace API requests as a query parameter:
https://trace.endform.dev/?traceSource=https%3A%2F%2Fexample.com%2Fplaywright-otel-trace-viewer%2Fv1%2F{traceId}&traceToken={token}
This loads {baseUrl}/traces?traceToken={token} and {baseUrl}/screenshots.zip?traceToken={token}.
The token can also be embedded in the traceSource URL, or in a Trace API URL entered in the load form. The viewer normalizes those forms back to the canonical top-level traceToken query parameter.
The remote API contract is:
GET {baseUrl}/traces returns { "resourceSpans": [...] } or 404 when the trace does not existGET {baseUrl}/screenshots.zip returns a ZIP with root manifest.json and screenshots/*, or 404 when there are no screenshotsThe service worker exposes internal per-screenshot URLs to the viewer after loading the ZIP.
You can deploy a copy of the trace viewer to Cloudflare:
git clone https://github.com/endformdev/playwright-opentelemetry.git
cd playwright-opentelemetry/trace-viewer
pnpm install
pnpm build
pnpm deploy
If you want to build with absolute paths for a specific deployment location:
TRACE_VIEWER_BASE=/trace-viewer/ pnpm build
pnpm install
pnpm dev
FAQs
Playwright OpenTelemetry Trace Viewer - A web application for viewing Playwright Opentelemetry test traces
The npm package @playwright-opentelemetry/trace-viewer receives a total of 0 weekly downloads. As such, @playwright-opentelemetry/trace-viewer popularity was classified as not popular.
We found that @playwright-opentelemetry/trace-viewer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.