QA360 Core Engine - Proof generation, signatures, and evidence vault
npm install qa360-coreThe heart of QA360 - handles proof generation, cryptographic signatures, and evidence vault.
| Adapter | Description | Status |
|---------|-------------|--------|
| playwright-api | REST/GraphQL API testing | ✅ Production |
| playwright-ui | UI + Accessibility testing | ✅ Production |
| k6-perf | Load & performance testing | ✅ Production |
| semgrep-sast | Static security analysis | ✅ Production |
| zap-dast | Dynamic security scanning (Docker/local) | ✅ Production |
| gitleaks-secrets | Secret detection in code | ✅ Production |
| osv-deps | Dependency vulnerability scanning | ✅ Production |
The orchestration engine for quality gates:
``typescript
import { Phase3Runner } from 'qa360-core';
const runner = new Phase3Runner({
workingDir: process.cwd(),
pack: packConfig,
});
const result = await runner.run();
// Result includes: gates, trustScore, proofPath, duration
`
- Local-first: No cloud dependencies required
- Cryptographically verifiable: All proofs are signed
- Immutable audit trail: Evidence cannot be altered
- Performance optimized: SQLite WAL for concurrent access
`bash`
cd core/
npm install
npm run build
npm test
QA360 uses Playwright for browser automation. By default, Chromium is bundled and ready to use.
`bash`
pnpm browsers:check
`bashInstall Chromium (usually pre-installed)
pnpm browsers:install:chromium
$3
Tests automatically skip if a required browser is not installed:
`
⚠️ firefox is optional and not installed. Install with: npx playwright install firefox
⊘ Firefox Browser E2E > should launch Firefox browser ... Skipped
``- Browser Support - Complete browser management guide
- Multi-Browser Strategy - Cross-browser testing approach
- CHECKLIST_VALIDATION - Feature coverage matrix