Skip to content
SPECIFICTION
Get listed

accessio-scan

github.com

API
Visit github.com
Spec score 7.1 #122 of 133 in Website Accessibility Tools

Spec sheet

What it does
accessio-scan is an open-source command-line accessibility scanner that runs axe-core against a URL and reports WCAG violations.Read 12 Oct 2026 · github.com
Purpose
accessio-scan runs axe-core against a URL and reports WCAG violations.Read 12 Oct 2026 · github.com
Free plan
YesRead 22 Sep 2026 · github.com
Security
The Chromium sandbox is enabled by default, and the README warns against scanning untrusted URLs from a privileged network.Read 12 Oct 2026 · github.com
License
The project is MIT-licensed and bundles axe-core under MPL 2.0.Read 12 Oct 2026 · github.com
Audit coverage
The README describes each run as a WCAG 2.1 and 2.2 audit using the default axe-core ruleset.Read 12 Oct 2026 · github.com
Automated testing limit
The README says axe-core can automatically detect roughly 50% of WCAG success criteria and that the remaining criteria need manual audits.Read 12 Oct 2026 · github.com
Browser dependency
Playwright downloads Chromium on first use, about 300 MB; browser download can be skipped when Chromium is already installed.Read 12 Oct 2026 · github.com
CI integration
The README shows using SARIF output with GitHub Code Scanning to annotate pull requests.Read 12 Oct 2026 · github.com
CI/CD integration
YesRead 22 Sep 2026 · github.com
How to run
The README shows running it with npx or installing it globally with npm.Read 12 Oct 2026 · github.com
Install
Run it with npx or install it globally through npm; it requires Node.js 20 or later.Read 12 Oct 2026 · github.com
Intended use
The README presents the scanner as a CI gate and says issues and pull requests are welcome.Read 12 Oct 2026 · github.com
Notable limits
Version 0.1 scans one page at a time, and the README says roughly half of WCAG success criteria can be automatically detected; the rest need manual audits.Read 12 Oct 2026 · github.com
Output formats
The CLI supports console, JSON, and SARIF output, and the package exposes a programmatic scan API.Read 12 Oct 2026 · github.com
Privacy caveat
SARIF reports include the offending element’s outer HTML, which may expose sensitive DOM content to people with access to the repository’s Security tab.Read 12 Oct 2026 · github.com
Programmatic use
The package exports a programmatic scan API and a JSON formatter.Read 12 Oct 2026 · github.com
Requirement
It requires Node.js 20 or later and downloads Chromium on first use, about 300 MB via Playwright.Read 12 Oct 2026 · github.com
SARIF data caution
SARIF reports contain offending elements’ outer HTML, which may expose sensitive content from the scanned page to people who can read the repository’s Security tab.Read 12 Oct 2026 · github.com
Scan scope
pageRead 22 Sep 2026 · github.com
Scope limit
Version 0.1 scans a single page; crawling and sitemap support are described as planned for v0.2.Read 12 Oct 2026 · github.com
Security guidance
The README warns against scanning untrusted URLs from privileged networks because the browser can reach internal services.Read 12 Oct 2026 · github.com
Telemetry
Telemetry is opt-in and off by default; the README says reports include a one-way hostname hash and scan-rule metadata, but not URLs, page HTML, cookies, or authentication data.Read 12 Oct 2026 · github.com
Telemetry and privacy
Telemetry is opt-in and off by default; the README says it sends a hashed hostname and scan-rule metadata, but not URLs, page HTML, headers, cookies, or authentication.Read 12 Oct 2026 · github.com
Telemetry hosting
The telemetry endpoint can be overridden, allowing users to send opt-in telemetry to their own collector.Read 12 Oct 2026 · github.com
WCAG version
wcag 2.2Read 22 Sep 2026 · github.com

Where Specifiction places it

Alternatives to accessio-scanAll alternatives →