Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-28 03:21 UTC

Bin-Huang / camoufox-cli

Anti-detect browser automation CLI & Skills for AI agents — Camoufox-powered fingerprint spoofing, no bot-detectable Playwright leaks

Python · TypeScriptMIT★ 321 stars⑂ 40 forkssince Mar 2026View on GitHub ↗

Bin-Huang/camoufox-cli holds a health index of 57 out of 100, placing it in the Moderate band. It scores highest on Vitality (79/100) and lowest on Security (40/100). It was last updated 7 days ago. A single contributor accounts for most of its recent work.

57
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

57
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Benn HuangPersonal account
1,500 followers82 public repossince Jul 2016

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
PyPIcamoufox-cli0.7.3-207 days agoai-agentanti-detectautomationbrowsercamoufoxheadless
npmcamoufox-cli0.7.31,386197 days agobrowserautomationanti-detectcamoufoxai-agentheadless

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

79Good · 22% of overall
How it's scored
36/36Push recency — last push 7 days ago
9/36Commit cadence — 13/52 weeks with commits
17.8/18Commit volume — 96 commits in the last year
10/10OpenSSF Scorecard: Maintained — 22 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year96
human_commit_share1
days_since_last_push7
active_weeks_last_year13
How it's scored
16.2/27Ships releases — 11 version tags (no GitHub releases)
36/36Release recency — latest release 7 days ago
27/27Release cadence — a release every ~12.3 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count11
latest_release_tagv0.7.3
releases_from_tagsyes
days_since_latest_release7
mean_days_between_releases12.3
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

52Moderate · 18% of overall
How it's scored
40.6/60Stars — 321 stars
13.3/25Forks — 40 forks
0/15Watchers — 2 watchers
Inputs used
forks40
stars321
watchers2
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno
How it's scored
41.9/80Monthly downloads — 1,386 downloads/month across npm, pypi
0/20Registry dependents — not reported by this ecosystem
Inputs used
packagescamoufox-cli, camoufox-cli
dependents
ecosystemsnpm, pypi
total_downloads
monthly_downloads1,386
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

61Moderate · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0/22.5Commit distribution — top contributor authored 100% of commits
1.4/13.5Contributor breadth — 1 contributors
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Inputs used
bus_factor1
contributors_sampled1
top_contributor_share1
How it's scored
46.8/46.8Issue resolution — 100% of issues closed
34/38.3PR acceptance — 8/9 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 0/29 approved changesets -- score normalized to 0
Inputs used
merged_prs8
open_issues0
closed_issues4
issue_closed_ratio1
closed_unmerged_prs1
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
22.8/25Owner reach — 1,500 followers of Bin-Huang
25/25Track record — 82 public repos, account ~10 yr old
Inputs used
followers1,500
owner_typeUser
is_verified
owner_loginBin-Huang
public_repos82
account_age_days3,650
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
How it's scored
25/25Published & resolvable — 2 package(s) on npm, pypi
35/35Publish recency — latest publish 7 days ago
20/20Version history — 20 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagescamoufox-cli, camoufox-cli
ecosystemsnpm, pypi
any_deprecatedno
min_days_since_publish7

Engineering Quality

Are baseline engineering and documentation practices in place?

44At risk · 20% of overall
How it's scored
0/24CI workflows
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — 0 out of 8 merged PRs checked by a CI test -- score normalized to 0
Inputs used
has_cino
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno
How it's scored
30/30README
0/25Documentation directory
15/15Documentation / homepage site — https://www.npmjs.com/package/camoufox-cli
10/10Repository description
10/10Topics — 10 topics
10/10Wiki
Inputs used
topicsai-agents, anti-detect, bot-detection, browser-automation, camoufox, claude-code, cli, fingerprinting, playwright, web-scraping
has_wikiyes
homepagehttps://www.npmjs.com/package/camoufox-cli
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

40At risk · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — 0 out of 8 merged PRs checked by a CI test -- score normalized to 0
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/29 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
0/10Dangerous-Workflow — no data
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 22 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
0/5Pinned-Dependencies — no data
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — no data
0/7.5Vulnerabilities — 18 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated13
scorecard_versionv5.5.0
checks_inconclusive5
scorecard_aggregate2.5
Excluded from scoring (no data or not applicable): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories0
affected_packages0
assessed_packages35
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:camoufox-cli@0.7.3 runtime dependency closure — what installing the published package pulls in — 35 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

58Moderate · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
31.7/40Legible commit history — 57 of 96 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.594
agent_instruction_files
agent_instruction_max_bytes
How it's scored
18/18One-command bootstrap — Makefile
22/22Automated tests
0/11Lint / format config
11/11Static type checking — js/tsconfig.json
10/10Reproducible environment — lockfile
0/10Demonstrated agent practice — no agent-authored commits among the last 96
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — no data
Inputs used
has_nixno
has_testsyes
lockfilespackage-lock.json, pnpm-lock.yaml
has_dockerfileno
typed_languageno
bootstrap_filesMakefile
has_devcontainerno
has_linter_configno
typecheck_configsjs/tsconfig.json
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
How it's scored
27/45Type-checkable code — Python with type-check config (js/tsconfig.json)
55/55Manageable file sizes — 0/43 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes23,434
source_files_sampled43
oversized_source_files0

Key facts

321GitHub stars
1contributors
96commits, last 12 months
7days since last push
11releases
1bus factor
0open issues
npm, PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

More detail

Star and fork history 0 ★ / 40 ⇿
0Stars
40Forks
8Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

0102030403972026-032026-052026-06
Major 0Minor 3Patch 5
OpenSSF Scorecard 2.5 / 10
2.5aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-28 03:21 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
0CI-Tests0 out of 8 merged PRs checked by a CI test -- score normalized to 0
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/29 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
n/aDangerous-Workflowno workflows found
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained22 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
n/aPinned-Dependenciesno dependencies found
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
n/aToken-PermissionsNo tokens found
0Vulnerabilities18 existing vulnerabilities detected
Direct dependencies 6
RegistryPackageVersion constraintManifest
npmcamoufox-js0.11.2js/package.json
npmpdf-lib^1.17.1js/package.json
npmplaywright-core1.52.0js/package.json
PyPIcamoufox==0.4.11pyproject.toml
PyPIplaywright==1.52.0pyproject.toml
PyPIPillowpyproject.toml
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Dependency advisories 0

Installing pypi:camoufox-cli@0.7.3 pulls in 35 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.

No known advisories affect the assessed dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "ai-agents",
        "anti-detect",
        "bot-detection",
        "browser-automation",
        "camoufox",
        "claude-code",
        "cli",
        "fingerprinting",
        "playwright",
        "web-scraping"
      ],
      "is_fork": false,
      "size_kb": 333,
      "has_wiki": true,
      "homepage": "https://www.npmjs.com/package/camoufox-cli",
      "languages": {
        "HTML": 688,
        "Python": 152166,
        "Makefile": 568,
        "JavaScript": 24898,
        "TypeScript": 126763
      },
      "pushed_at": "2026-07-20T08:31:14Z",
      "created_at": "2026-03-02T14:05:24Z",
      "owner_type": "User",
      "updated_at": "2026-07-25T06:26:56Z",
      "description": "Anti-detect browser automation CLI & Skills for AI agents — Camoufox-powered fingerprint spoofing, no bot-detectable Playwright leaks",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Python",
      "significant_languages": [
        "Python",
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://bennhuang.com",
      "name": "Benn Huang",
      "type": "User",
      "login": "Bin-Huang",
      "company": null,
      "location": "Shenzhen, China",
      "followers": 1500,
      "avatar_url": "https://avatars.githubusercontent.com/u/20723142?v=4",
      "created_at": "2016-07-29T10:47:46Z",
      "is_verified": null,
      "public_repos": 82,
      "account_age_days": 3650
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2026-07-20T08:29:47Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-07-16T09:47:18Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-07-15T06:57:45Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-06-18T14:49:23Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-06-18T11:49:24Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-10T12:13:29Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-09T14:11:58Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-04-13T08:26:50Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-04-10T12:06:24Z"
        },
        {
          "tag": "v0.1.10",
          "kind": "patch",
          "published_at": "2026-03-31T12:29:45Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2026-03-19T12:47:33Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6d80537669f12cd7f71f31c70a0c83287566ad8d",
          "body": "Patch release repairing the Linux/container install path (#19).\n\n- `install --with-deps` no longer hard-requires sudo: when already running\n  as root (most Docker/CI images, which rarely ship sudo) the package\n  manager is invoked directly, with sudo kept for unprivileged interactive\n  installs\n- js\n[…]\ne default UBO addon at install time, matching the JS side\n\nKnown issue: an addons/UBO directory left empty by 0.7.2 is not repaired by\nupgrading — remove ~/.cache/camoufox/addons and re-run `install`.",
          "is_bot": false,
          "headline": "bump version to 0.7.3",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-20T08:29:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c0ed8ad69c6f05eacd80ab0f36a788de7fd89e43",
          "body": "…onsistent (#19)",
          "is_bot": false,
          "headline": "fix: repair install on root containers and make addon/browser setup c…",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-20T08:25:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8062344acb1add0dc3e7d944a44f49f7f44768af",
          "body": "Patch release fixing unreliable concurrent tab closes (#18). When several\nagents closed their tabs at once, releases interleaved so every one saw an\nemptied tab map and concluded it was the last tab out: the browser was torn\ndown repeatedly and siblings had their connections destroyed before their\nr\n[…]\nt connections until the response\n  flushes, with a 10s backstop\n- cli (both JS and Python): treat close as idempotent — a missing daemon\n  socket means there is nothing left to close, which is success",
          "is_bot": false,
          "headline": "bump version to 0.7.2",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-20T05:37:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a5e40c0e6abe012b77105e5316a2e0221beccaf",
          "body": "…p receipts) (#18)",
          "is_bot": false,
          "headline": "fix(js): make concurrent tab closes reliable (serialize releases, kee…",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-20T05:35:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ee890659bf8c6e0677962f6bdc5ae608a83dc42",
          "body": "Patch release fixing the broken Linux install shipped in 0.7.0 (#17):\nprerelease-asset selection, post-install verification, Ubuntu 24.04 t64\ndeps, in-process browser detection, Node 20.10 floor, and exact pins for\ncamoufox / camoufox-js.",
          "is_bot": false,
          "headline": "bump version to 0.7.1",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-16T09:47:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a6c5e2ed0874f8d2a950b95efbd80fc72d7e8c1",
          "body": "…ps, browser detection) (#17)",
          "is_bot": false,
          "headline": "fix: repair Linux browser install (prerelease assets, Ubuntu 24.04 de…",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-16T09:36:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc0fa6a3e44c941d528a00e5196d51b944d26a8c",
          "body": null,
          "is_bot": false,
          "headline": "feat: add --version flag to print the CLI version (#16)",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-15T07:39:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "859f2ed8b57ab049b3bf6c5028a4da1788acf142",
          "body": "Sync both packages to 0.7.0. The Python package was left at 0.6.0 while\nnpm reached 0.6.2 via JS-only releases; this re-aligns them and ships the\n--tab shared-browser concurrency, the daemon close-hang fix, and the\nreference-counted close semantics (close-tab folded into close).",
          "is_bot": false,
          "headline": "bump version to 0.7.0",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-15T06:57:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b493a731546630a0cd54db59898c3935afb6398",
          "body": "The frontmatter description already tells the agent what the tool is and\nwhen to use it — that's what routed it here. Start the body at the Core\nWorkflow instead of restating the pitch.",
          "is_bot": false,
          "headline": "docs(skill): drop the redundant intro section",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-15T06:36:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2da204f2141b5f838ac596f1d4cd39a6c7cb7be2",
          "body": "… the last tab closes (#15)",
          "is_bot": false,
          "headline": "feat: reference-counted `close` — release the caller's tab, exit when…",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-14T10:55:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "933fa8c5c5359a2f1f28c6bd41ef4cdb14d461b2",
          "body": null,
          "is_bot": false,
          "headline": "fix(js): shut the daemon down on close instead of hanging forever (#14)",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-14T03:53:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb0101cfab281e8d89a2c171685e57653711d438",
          "body": null,
          "is_bot": false,
          "headline": "feat: add --tab for shared-browser concurrency (#13)",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-07-14T03:32:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27232524aaf417e429f21dac8caa7d4df03197fd",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.6.2",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-18T14:49:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b079849e926b50473c8ce332d31b1dbbf188b658",
          "body": "The caret range let playwright(-core) drift to 1.60/1.61, whose Juggler client expects protocol fields the bundled Camoufox binary doesn't send, causing \"Connection closed while reading from the driver\" failures.\n\n- js: pin playwright-core to 1.52.0, bump camoufox-js to ^0.11.1, release 0.6.1\n- python: pin playwright==1.52.0 (was unpinned, resolved to 1.60.0)",
          "is_bot": false,
          "headline": "fix: pin playwright to 1.52.0 for Camoufox Juggler compatibility",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-18T14:40:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75f089db7989410430ed96c067ffb6e3b8151d32",
          "body": null,
          "is_bot": false,
          "headline": "chore(js): bump camoufox-js to 0.11.1, release 0.6.1",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-18T11:49:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9707df77ec45cf9385e6a89fd73f5cc99c3f5bec",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.6.0",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-10T12:13:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "654164bf3472ca28d6c7831991841b321114c9be",
          "body": null,
          "is_bot": false,
          "headline": "feat: make browser install resilient to GitHub API rate limits",
          "author_name": "Benn Huang",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-10T11:58:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b462e8b5c1a26fb68b1dc4c84b6f348b8d867651",
          "body": "Anonymous GitHub API requests are capped at 60/hour per IP, so\n`camoufox-cli install` often fails on servers behind shared egress IPs.\n\n- discover release assets by paging github.com release pages when the\n  API request fails (same selection logic, not behind the API limit)\n- download the GeoIP database from a fixed releases/latest/download URL\n  (no API) at install time and before geoip launches, so the lazy\n  API-based download in upstream never triggers",
          "is_bot": false,
          "headline": "feat: make browser install resilient to GitHub API rate limits",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-10T11:51:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "252bdd19256e8ec7e84c9e9ff36257ada4f36669",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.5.0",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-09T14:11:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bc536182e33e8298126b3682dae35f123626184",
          "body": "~/.camoufox-cli/config.json (override via $CAMOUFOX_CLI_CONFIG) supplies\ndefaults for daemon-launch flags so common settings need not be repeated on\nevery call. A \"default\" block applies to every session; optional\n\"sessions.<name>\" blocks layer overrides whenever --session <name> is used.\n\nPrecedenc\n[…]\n. Each value is validated against its flag's type and ignored with a\nwarning when wrong, so a malformed config is never fatal.\n\nImplemented in both the Python and TypeScript CLIs, with matching tests.",
          "is_bot": false,
          "headline": "add optional config file for default flag values",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-06-09T14:02:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19d3af8dfa59bbcaf524800f0db4ced0be463d09",
          "body": null,
          "is_bot": false,
          "headline": "cap navigation history at 200 entries on the JS side",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-05-21T06:12:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a1b549b95bbae34e94fffb9bd4e02fe638e37c5",
          "body": "Prevents unbounded list growth in long-lived daemons. The per-push O(n)\nslice also stays cheap at this size.",
          "is_bot": false,
          "headline": "cap navigation history at 200 entries",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-05-21T05:58:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49f9dc2aeb5d7581e30a18a1f05d9987577a6691",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.4.0",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-21T05:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ccde158bb9ccd8f45c6bb0aab527639a267ef62",
          "body": "With --persistent, generate and store a camoufox-cli.json on first\nlaunch capturing fingerprint, OS, canvas/font seeds, locale, and\nproxy-derived timezone/geolocation. Subsequent launches reload it so\nevery visit looks like the same device. CLI-passed --locale and\n--proxy + geoip overwrite the stored values; fingerprint/OS/seeds\nare frozen until the directory is deleted.\n\nMirrored in both Python and JS runtimes.",
          "is_bot": false,
          "headline": "freeze fingerprint/OS/locale into --persistent identity",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-21T04:01:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f0fa0ab006b96b73348d0b99cba268979b9cceb",
          "body": "Overrides the statistical locale randomization that Camoufox's geoip\nspoofing does, which otherwise can randomly pick e.g. Arabic for a US\nproxy and render the whole page UI in that language.",
          "is_bot": false,
          "headline": "add --locale flag to force browser locale",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-17T14:17:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10972dbd1325eb50fa436eab58e9bfedcbd759d3",
          "body": null,
          "is_bot": false,
          "headline": "use uv for build and twine in Makefile",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-13T08:33:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72a6e258c1cc912120d39eac33729046e4871da3",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.3.0",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-13T08:26:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cac69aa8f045e214b34ff27b30ab2e5f19b29816",
          "body": "Previously restricted to http:// after a failed test against a plain\nHTTP proxy mistakenly specified as https://. A proper HTTPS proxy\n(TLS to the proxy itself, typically on port 443) works fine with\nPlaywright's Firefox + the existing Proxy-Authorization header\nworkaround. Also surface --no-geoip in SKILL.md which missed it.",
          "is_bot": false,
          "headline": "accept https:// proxy scheme in addition to http://",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-13T08:23:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f80d579d40ba7c969acd6a9593c95070bda64c5",
          "body": "Camoufox strongly recommends geoip=True with a proxy so that\ntimezone/locale/WebRTC spoofing align with the proxy's IP\n(otherwise fingerprint/IP inconsistency is trivial to detect).\nAuto-enable when --proxy is passed; --no-geoip opts out.",
          "is_bot": false,
          "headline": "add --no-geoip flag; auto-enable geoip when --proxy is set",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-13T08:13:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "626faaf471a1a5561eb569e060835449e9972646",
          "body": "…y auth failure\n\nPlaywright's Firefox transport fails to authenticate HTTP proxies on HTTPS\nCONNECT tunnels, surfacing as NS_ERROR_PROXY_AUTHENTICATION_FAILED. Mirror\nthe WebKit/Chromium behavior by injecting Basic auth via extra HTTP headers.",
          "is_bot": false,
          "headline": "fix: inject Proxy-Authorization header to bypass Firefox Juggler prox…",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-13T07:53:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad65414cb349c9845a2eabe488460e8e1db4a19a",
          "body": "https:// was never actually supported: Playwright Firefox maps the scheme\nto a TLS-to-proxy connection, which plain HTTP proxies don't speak, so it\nsurfaced as a confusing NS_ERROR_PROXY_AUTHENTICATION_FAILED. Reject it\nup front with a clear error instead.",
          "is_bot": false,
          "headline": "restrict --proxy to http:// scheme only",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-11T03:23:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deac1a126f8d1ad316c0bc0c78f33b5787d8c466",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.2.1",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-10T12:06:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86638771d1686d3732b0ffb53ead9f5a47aa9d7a",
          "body": "Move proxy URL parsing out of BrowserManager into dedicated proxy\nmodules (proxy.py / proxy.ts) so the logic can be unit-tested in\nisolation and kept in sync between the Python and JS implementations.\n\nAlso strip default ports (http:80 / https:443) from the server URL to\nmatch how native URL parsers normalize them.",
          "is_bot": false,
          "headline": "refactor: extract proxy URL parsing into shared module",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-10T12:03:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0679bf43e717a15b01479e37ea0cf5bb2df96f9c",
          "body": null,
          "is_bot": false,
          "headline": "docs: update description to mention Skills alongside CLI",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-07T07:07:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "810c0276671e6e30c9dc5d40e13e3bde494ddd53",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.2.0",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-01T09:45:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c40decb88fe7ca858f96f3b706d20b733a4f59a5",
          "body": "When --persistent is used without a path argument, automatically use\n~/.camoufox-cli/profiles/<session>/ as the profile directory. This\nmakes persistent mode easier to use while keeping ephemeral mode as\nthe default when --persistent is omitted entirely.",
          "is_bot": false,
          "headline": "feat: make --persistent path optional with default profile directory",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-04-01T09:41:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e69174a9f983eefa6791ebf9f12b6b7212811c0",
          "body": null,
          "is_bot": false,
          "headline": "add LICENSE to JS sub-package and ignore uv.lock",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-31T12:44:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f28926b691208321aa05e774432c5b580bd793df",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.10",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-31T12:29:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c376bdcfc74de61f1bf5d86d49ddc6f864f15a4a",
          "body": "Plumb a --proxy <url> global flag through the CLI → daemon → server →\nbrowser launch pipeline on both Python and JavaScript sides.\n\nSupports authenticated proxies (http://user:pass@host:port).\nSOCKS proxies are explicitly rejected with a clear error message\nbecause the underlying camoufox-js library cannot handle them.",
          "is_bot": false,
          "headline": "feat: add --proxy flag for HTTP/HTTPS proxy support",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-31T12:22:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cf117e63b0a89535e2bf9bbb936768b10670f9b",
          "body": "Add step 5 (Close) to remind AI agents to close the browser\nwhen the task is fully complete, while keeping it open if the\nuser may have follow-up instructions.",
          "is_bot": false,
          "headline": "docs: add close step to core workflow in skill definition",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-30T10:24:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0053731e7c3fb0ba2e8751f3c39c5aa7fab2a044",
          "body": null,
          "is_bot": false,
          "headline": "docs: update Related section with all sibling projects",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-20T15:19:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "375c2fcc5bf21aed65a5dc593d21265e6f06e64a",
          "body": null,
          "is_bot": false,
          "headline": "docs: use \"this CLI\" in agent install hint",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-20T15:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c80371777faa2208ffefa2c8cd241aac2f631b9",
          "body": null,
          "is_bot": false,
          "headline": "docs: add AI agent install hint to README",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-20T14:53:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a022fd6d57d40d72ca3210381497d7e48e29960",
          "body": "- Bump js/package.json version from 0.1.8 to 0.1.9 to match Python\n- Add homepage and bugs fields\n- Copy LICENSE in prepublishOnly and include in files",
          "is_bot": false,
          "headline": "Sync JS sub-package version to 0.1.9 and add missing fields",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-20T08:12:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8acc1ace86b141c13abcc549a63e74063e31afd8",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.9",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-19T12:47:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d3e90f583ba99eac80606637727d59612ddd655",
          "body": "Screenshot without a file path outputs JSON with a base64 field,\nnot raw base64 to stdout.",
          "is_bot": false,
          "headline": "docs: fix screenshot output format description",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-19T11:21:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "778f42ec17fd4888228077d8342d18451457f23a",
          "body": "- Remove broken links to non-existent references/*.md files\n- Fix screenshot comment to show actual JSON output format",
          "is_bot": false,
          "headline": "docs: fix broken references and screenshot description in skill",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-19T09:56:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "994f622bb1c43e6750bc6ec2da6add3029f40415",
          "body": null,
          "is_bot": false,
          "headline": "docs: streamline Installation section in README",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-18T11:14:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32e115c88c097e489ab3b690b66a7b2d7f729fb3",
          "body": null,
          "is_bot": false,
          "headline": "docs: add CLI doc link to skill, clean up README",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-18T06:54:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9e088b5a53ebb4a094a7b7bcd641487ce6bb64e",
          "body": "…add .env to gitignore",
          "is_bot": false,
          "headline": "cleanup for open source release: fix copyright name, remove SPEC.md, …",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-16T14:15:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c4a3302f02af7ce21e74be73fb9fb92015d7c17",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.8",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-14T15:30:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7f9c9310d1562d2c82362ce86842b227668f2ff",
          "body": "The previous suffix-based check (.js/.ts) failed when installed\nglobally via npm, where the symlinked binary has no extension.",
          "is_bot": false,
          "headline": "fix: use realpath comparison for entry point detection (fixes #5, #3)",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-14T11:03:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10574590d885296dc974ada2538994adb8933dfa",
          "body": null,
          "is_bot": false,
          "headline": "simplify README intro: replace marketing copy with highlights",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-13T19:47:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f41fa97d0f7a5ad9139f94d4bd228bf63de58f0d",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.7",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-11T03:42:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "949b1493aac3f94c296591c507769372166e8ed8",
          "body": "Firefox/Camoufox doesn't support Playwright's native page.pdf(), so this\ntakes a full-page screenshot and converts it to PDF using Pillow (Python)\nand pdf-lib (JS).",
          "is_bot": false,
          "headline": "implement pdf export via screenshot-to-PDF conversion",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-11T03:14:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65cc3ac33661b31beb2750a027af02ae74cff2a6",
          "body": "…ce guides\n\n- Restructure SKILL.md with command chaining, session cleanup, timeouts guidance\n- Expand ref lifecycle section with correct/wrong examples and stale ref consequences\n- Add troubleshooting section (4 common scenarios)\n- Add references/snapshot-refs.md: detailed ref mechanics, best practices, troubleshooting\n- Add references/commands.md: complete command reference for all 22 commands\n- Remove unsupported `allowed-tools` frontmatter attribute",
          "is_bot": false,
          "headline": "rewrite agent skill with comprehensive ref lifecycle docs and referen…",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-10T13:29:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66329e1404da4872d1fbbdeee7b6833aa103ac79",
          "body": "Full-stack tests exercising daemon server + Unix socket protocol + real\nbrowser against tests/fixture.html. Covers open, snapshot, fill, click,\nselect, check, scroll, wait, press, back/forward, tabs, cookies, close.",
          "is_bot": false,
          "headline": "add e2e tests for Python and JS (13 tests each)",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T12:34:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57aa6227ec3df48fee03261c09935a71a8f31283",
          "body": "Test coverage: protocol, refs, CLI arg parsing, command dispatch,\nserver socket handling, and browser manager.",
          "is_bot": false,
          "headline": "add vitest tests for JS version (126 tests across 6 files)",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T12:14:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b39a50d5a242f165ab6b03e7c97ac581601a8e4",
          "body": null,
          "is_bot": false,
          "headline": "rewrite README intro with features list and works-with section",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T12:05:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "066446eb77fd7973cbdbddc2e834518b124a072f",
          "body": null,
          "is_bot": false,
          "headline": "move agent skill section under install in README",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T11:28:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de3171d5cdab2f6be298734e825a51e50a3c28fa",
          "body": null,
          "is_bot": false,
          "headline": "add agent skill and plugin registration for AI coding agents",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T11:20:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f48cbb1e7d01f0fb01a51283bcb4713b520e86a",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.6",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T09:07:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d93e7866b57a4bd8990521bbe14464fa47b5aa6a",
          "body": null,
          "is_bot": false,
          "headline": "copy README.md into js/ on prepublish for npm display",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T09:00:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0db7740c9fc991ac1d3768e8e175c5a5c9d75ec2",
          "body": "…ht click\n\n- Always pass name to getByRole (even empty string) so unnamed elements\n  don't mismatch nth index with named elements of the same role\n- Replace evaluate(el.click()) with locator.click() for proper\n  actionability checks (auto-wait, scroll into view, visibility)\n- Remove link href detection that bypassed SPA routing",
          "is_bot": false,
          "headline": "fix click selector: correct unnamed element matching and use Playwrig…",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T08:56:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "989f62497683b14e66b2fa75bd7fdc70e9ad4dce",
          "body": null,
          "is_bot": false,
          "headline": "unify author name to Benn Huang",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T07:49:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0668936883d57ed8380703277ca9debb51584c9",
          "body": null,
          "is_bot": false,
          "headline": "remove stale root package.json and add repository to js/package.json",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T07:45:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dea45e8fa8bb762b480e98ab1ca0f0960dbfbb2",
          "body": null,
          "is_bot": false,
          "headline": "tweak",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T07:43:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b922686610e391b130f5a6364fa72188858cf68b",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.5 and add npm targets to Makefile",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T07:35:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4e0c0c750253dbae419c65348dfab9ad760607a",
          "body": "- Separate dep lists for apt-get, dnf, and yum (matching agent-browser)\n- Detect libasound2t64 vs libasound2 on newer Debian/Ubuntu\n- Remove unused sys import in browser.py",
          "is_bot": false,
          "headline": "fix --with-deps: use correct package names per Linux distro",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T07:24:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf2dd60560b41bfdee6f72e77267f917921bbd28",
          "body": "- postinstall now shows a reminder instead of downloading the browser\n- browser launch checks for binary and throws with install instructions\n- --with-deps detects apt-get/dnf/yum and installs system libs directly",
          "is_bot": false,
          "headline": "remove auto-download, require explicit `camoufox-cli install`",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T07:08:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "671c66a6a57205228fb9a1670f257aa809354430",
          "body": null,
          "is_bot": false,
          "headline": "auto-fetch camoufox browser binary on first launch",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T05:58:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1dd89c01728be990c2532a489e62a13831badc4",
          "body": "Port the Python CLI to TypeScript using camoufox-js and playwright-core.\nSame CLI interface, same daemon architecture (Unix socket + background process).\nEnables `npm install -g camoufox-cli` as an alternative to `pip install camoufox-cli`.",
          "is_bot": false,
          "headline": "add Node.js/TypeScript version for npm distribution",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-09T03:10:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fa90c79505869f9d23fb929672fbf3b21ac0555",
          "body": null,
          "is_bot": false,
          "headline": "improve README intro with clearer Camoufox and CLI value proposition",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-06T04:24:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bce0b9a96ca454cce6ef3815e9e30c9d82c5ecdd",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.4",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-06T04:14:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb719384df307ddc9d9ba311bfe1556aad0a01b1",
          "body": "Bugs fixed:\n- click: walk up DOM to find <a> ancestor (child elements like <span> inside links)\n- check/hover: add force=True to avoid sticky header timeouts\n- close: reset navigation history\n- _cleanup_stale: catch PermissionError for other users' processes\n- print_response: remove unreachable dead\n[…]\n (no network)\n- fill, type, select, check toggle, hover, click button, press,\n  text by ref/selector, cookies export/import, scoped snapshot,\n  wait selector, forward at end, history reset after close",
          "is_bot": false,
          "headline": "fix bugs found in review and add fixture-based integration tests",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-06T04:12:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93ca5e39b8f2c43aabe2248bd9cfec4218795e7f",
          "body": "- test_protocol: JSON protocol parsing, serialization, response builders\n- test_refs: aria snapshot parsing, ref assignment, nth disambiguation\n- test_cli: all command arg parsing, flags, error cases\n- test_commands: dispatch, param validation, 20 browser integration tests\n- Makefile: add test, test-unit, test-integration targets",
          "is_bot": false,
          "headline": "add test suite with 121 tests (unit + integration)",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-06T04:07:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56beeb7459f119c577a1e9ace75820cc9761312e",
          "body": "- open command detects dead browser and relaunches automatically\n- CLI verifies daemon is alive before reusing socket, cleans up stale ones",
          "is_bot": false,
          "headline": "auto-recover from browser crash and clean up stale sockets",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-06T03:59:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "504b1cade3aa711ce01e238882b8f4f24efe3ab8",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.3",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-06T03:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c34490d38b31c438d349a54709c7842da931a47f",
          "body": "Playwright's .click() times out when sticky elements intercept pointer\nevents. For <a> elements, read href and navigate via page.goto(). For\nnon-link elements, use JS el.click() to bypass actionability checks.",
          "is_bot": false,
          "headline": "fix click failing on pages with sticky headers/overlays",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-06T03:03:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98b860abb62db585f695a7226a318dec6aca7ea4",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.2",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T14:10:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a34dd8be92939e60de110c9bf0065cea08b2813",
          "body": "Camoufox spoofs the history API for anti-fingerprinting, making\nnative go_back/go_forward/reload hang or no-op. Implement our own\nnavigation history in BrowserManager and use goto() to navigate.\n\nAlso remove target attribute before click so _blank links navigate\nin the current tab instead of being silently ignored by Camoufox.",
          "is_bot": false,
          "headline": "fix back/forward/reload and click on target=_blank links",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T14:09:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "688209771441bf702010d9d90fe99540ac67d3c7",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.1.1 and add Makefile for build/publish",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T13:38:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8eb5e706f77c318129529a6dfeeafbf98c6ba0ab",
          "body": "- Use exact=True for name matching to avoid ambiguous substring matches\n- Always call .nth() to prevent strict mode violations with duplicates\n- Skip name parameter for unnamed elements to avoid matching empty names",
          "is_bot": false,
          "headline": "fix click timeout by improving ref resolution",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T13:22:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "613b26a8b70d67693af3efc275ca4413ac496548",
          "body": "Use wait_until=\"domcontentloaded\" for back/forward, and JS-based\nreload to work around Camoufox page.reload() hanging in Docker.",
          "is_bot": false,
          "headline": "fix back/forward/reload hanging in headless environments",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T08:17:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b578581315f596325f3f2b0fdb98f4e37bb26419",
          "body": "…ation",
          "is_bot": false,
          "headline": "remove deprecated Rust CLI, update SPEC.md to match current implement…",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T07:26:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd777614f3ef762a5c36fd0a90bbf47249743495",
          "body": "… validation",
          "is_bot": false,
          "headline": "fix wrong cmd_id in wait error, unclosed file handle, and missing arg…",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T07:16:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8778ad2723c34c65a97aa36d1431fda7bac2eb4d",
          "body": null,
          "is_bot": false,
          "headline": "add full README docs, PyPI metadata, and MIT license",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-05T04:17:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51f27ed44cf5c46bbae29d3fd322cf3f19fcea2d",
          "body": "- Rename Python module: src/cfox/ -> src/camoufox_cli/\n- Rename Rust binary: cfox -> camoufox-cli\n- Update socket/pid paths: /tmp/camoufox-cli-*.sock\n- Update all user-facing messages and usage strings\n- Add Python CLI client (cli.py) for pip/pipx distribution\n- Add [project.scripts] entry point in pyproject.toml",
          "is_bot": false,
          "headline": "rename cfox to camoufox-cli and add Python CLI client",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-03T12:07:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7833a02ce41b5e7c599f95078af5b47de31844cf",
          "body": null,
          "is_bot": false,
          "headline": "update README tagline",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-03T08:23:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64e233701c515a9961243284eca5985a1e57bbfd",
          "body": "- Add 20 missing command handlers in commands.py (back, forward, reload,\n  url, title, type, select, check, hover, press, text, eval, screenshot,\n  pdf, scroll, wait, tabs, switch, close-tab, cookies)\n- Add tab management and persistent profile support in browser.py\n- Pass --persistent flag through __main__.py and server.py\n- Fix pyproject.toml build-backend (hatchling.backends -> hatchling.build)",
          "is_bot": false,
          "headline": "implement all daemon command handlers and persistent profile support",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-03T08:12:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0a4f78d992c7fe1001091c45408ef06c09e0d05",
          "body": null,
          "is_bot": false,
          "headline": "handle sessions and close --all on client side",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-03T07:40:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9798d8ae827afd57b6d8fbe6c3a078a8fb29d32f",
          "body": null,
          "is_bot": false,
          "headline": "add --persistent flag and close --all support",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-03T07:34:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc41a4e7c6aab4cbc16a64cd95901e3de60adb0d",
          "body": "Add argument parsing for navigation (back, forward, reload, url, title),\ninteraction (type, select, check, hover, press), data extraction (text,\neval, screenshot, pdf), scroll/wait, tab management, session and cookies.\nExtend output.rs to handle new response types.",
          "is_bot": false,
          "headline": "implement all CLI commands and improve output formatting",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-03T07:30:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a289c06fd77a3aedff8df9f9a0b88802ea85bd2",
          "body": null,
          "is_bot": false,
          "headline": "improve README intro and add inline command comments",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-02T14:29:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee8c06dab7f7dd447f0230a126e949488f5f9c65",
          "body": "- Rust CLI (cli/): arg parsing, Unix socket connection, daemon auto-spawn\n- Python daemon (src/cfox/): socket server, Camoufox browser management, ref registry\n- Commands: open, snapshot, click, fill, close\n- npm placeholder package for name reservation",
          "is_bot": false,
          "headline": "scaffold Rust CLI + Python daemon architecture",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-02T14:17:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86962e41928d99189be85fa563c27deb931b0f67",
          "body": null,
          "is_bot": false,
          "headline": "init",
          "author_name": "Benn",
          "author_login": "Bin-Huang",
          "committed_at": "2026-03-02T12:40:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 11,
      "commits_last_year": 96,
      "latest_release_at": "2026-07-20T08:29:47Z",
      "latest_release_tag": "v0.7.3",
      "releases_from_tags": true,
      "days_since_last_push": 7,
      "active_weeks_last_year": 13,
      "days_since_latest_release": 7,
      "mean_days_between_releases": 12.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "camoufox-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "ai-agent",
            "anti-detect",
            "automation",
            "browser",
            "camoufox",
            "headless",
            "Development Status :: 3 - Alpha",
            "Environment :: Console",
            "Intended Audience :: Developers",
            "Topic :: Internet :: WWW/HTTP :: Browsers",
            "Topic :: Software Development :: Testing"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/camoufox-cli/",
          "is_deprecated": false,
          "latest_version": "0.7.3",
          "repository_url": "https://github.com/Bin-Huang/camoufox-cli",
          "versions_count": 20,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2026-03-05T12:52:37.676241Z",
          "latest_published_at": "2026-07-20T09:06:04.940785Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        },
        {
          "name": "camoufox-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "browser",
            "automation",
            "anti-detect",
            "camoufox",
            "ai-agent",
            "headless"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/camoufox-cli",
          "is_deprecated": false,
          "latest_version": "0.7.3",
          "repository_url": "https://github.com/Bin-Huang/camoufox-cli",
          "versions_count": 19,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 1386,
          "first_published_at": "2026-03-02T14:11:08.459000Z",
          "latest_published_at": "2026-07-20T09:06:21.219000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 40,
      "stars": 321,
      "watchers": 2,
      "fork_history": {
        "days": [
          {
            "date": "2026-03-11",
            "count": 5
          },
          {
            "date": "2026-03-12",
            "count": 1
          },
          {
            "date": "2026-03-13",
            "count": 4
          },
          {
            "date": "2026-03-16",
            "count": 1
          },
          {
            "date": "2026-03-18",
            "count": 1
          },
          {
            "date": "2026-03-19",
            "count": 1
          },
          {
            "date": "2026-03-20",
            "count": 1
          },
          {
            "date": "2026-03-25",
            "count": 1
          },
          {
            "date": "2026-03-30",
            "count": 1
          },
          {
            "date": "2026-04-01",
            "count": 2
          },
          {
            "date": "2026-04-02",
            "count": 1
          },
          {
            "date": "2026-04-09",
            "count": 1
          },
          {
            "date": "2026-04-10",
            "count": 1
          },
          {
            "date": "2026-04-22",
            "count": 1
          },
          {
            "date": "2026-04-27",
            "count": 1
          },
          {
            "date": "2026-05-04",
            "count": 2
          },
          {
            "date": "2026-05-05",
            "count": 2
          },
          {
            "date": "2026-05-26",
            "count": 1
          },
          {
            "date": "2026-05-30",
            "count": 1
          },
          {
            "date": "2026-06-11",
            "count": 7
          },
          {
            "date": "2026-06-12",
            "count": 2
          },
          {
            "date": "2026-06-27",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 39,
        "total_forks": 40
      },
      "star_history": null,
      "open_issues_and_prs": 6
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "js/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 23434,
      "source_files_sampled": 43,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "js/package.json",
        "pyproject.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 35,
        "malicious_count": 0,
        "assessed_package": "pypi:camoufox-cli@0.7.3",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "camoufox-js",
          "manifest": "js/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.2"
        },
        {
          "name": "pdf-lib",
          "manifest": "js/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.17.1"
        },
        {
          "name": "playwright-core",
          "manifest": "js/package.json",
          "ecosystem": "npm",
          "version_constraint": "1.52.0"
        },
        {
          "name": "camoufox",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==0.4.11"
        },
        {
          "name": "playwright",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==1.52.0"
        },
        {
          "name": "Pillow",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 6,
        "merged_prs": 8,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 4,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "Bin-Huang",
          "commits": 96,
          "avatar_url": "https://avatars.githubusercontent.com/u/20723142?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json",
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 8 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/29 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "22 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "no dependencies found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "18 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6d80537669f12cd7f71f31c70a0c83287566ad8d",
        "ran_at": "2026-07-28T03:21:23Z",
        "aggregate_score": 2.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-20T08:30:35Z",
      "oldest_open_prs": [
        {
          "number": 2,
          "created_at": "2026-03-11T23:48:24Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 4,
          "created_at": "2026-03-12T09:08:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 7,
          "created_at": "2026-03-18T02:05:38Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 9,
          "created_at": "2026-04-01T15:01:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 10,
          "created_at": "2026-05-30T15:49:38Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 12,
          "created_at": "2026-06-11T20:57:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-20T08:25:27Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Bin-Huang/camoufox-cli",
    "host": "github.com",
    "name": "camoufox-cli",
    "owner": "Bin-Huang"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 57,
      "inputs": {
        "security": 40,
        "vitality": 79,
        "community": 52,
        "governance": 61,
        "engineering": 44
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 79,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "commits_last_year": 96,
              "human_commit_share": 1,
              "days_since_last_push": 7,
              "active_weeks_last_year": 13
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "13/52 weeks with commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 13
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "96 commits in the last year",
                "points": 17.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 96
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "22 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "releases_count": 11,
              "latest_release_tag": "v0.7.3",
              "releases_from_tags": true,
              "days_since_latest_release": 7,
              "mean_days_between_releases": 12.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "11 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~12.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 12.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 52,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "forks": 40,
              "stars": 321,
              "watchers": 2,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "321 stars",
                "points": 40.6,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 321
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "40 forks",
                "points": 13.3,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 40
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "2 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 52,
            "inputs": {
              "packages": [
                "camoufox-cli",
                "camoufox-cli"
              ],
              "dependents": null,
              "ecosystems": "npm, pypi",
              "total_downloads": null,
              "monthly_downloads": 1386
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "1,386 downloads/month across npm, pypi",
                "points": 41.9,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 1386,
                      "ecosystems": "npm, pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 61,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 81,
            "inputs": {
              "merged_prs": 8,
              "open_issues": 0,
              "closed_issues": 4,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "8/9 decided PRs merged",
                "points": 34,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 8,
                      "decided": 9
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/29 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "followers": 1500,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "Bin-Huang",
              "public_repos": 82,
              "account_age_days": 3650
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1,500 followers of Bin-Huang",
                "points": 22.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1500,
                      "login": "Bin-Huang"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "82 public repos, account ~10 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 82
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 10
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "camoufox-cli",
                "camoufox-cli"
              ],
              "ecosystems": "npm, pypi",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "2 package(s) on npm, pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 2,
                      "ecosystems": "npm, pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "20 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 44,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "critical",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 24,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 8 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "ai-agents",
                "anti-detect",
                "bot-detection",
                "browser-automation",
                "camoufox",
                "claude-code",
                "cli",
                "fingerprinting",
                "playwright",
                "web-scraping"
              ],
              "has_wiki": true,
              "homepage": "https://www.npmjs.com/package/camoufox-cli",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://www.npmjs.com/package/camoufox-cli",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "10 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 40,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "dangerous_workflow",
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 25,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 13,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 5,
              "scorecard_aggregate": 2.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 8 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/29 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "22 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "18 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:camoufox-cli@0.7.3 runtime dependency closure — what installing the published package pulls in — 35 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "pypi:camoufox-cli@0.7.3",
                  "assessed": 35
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 35,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 35,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 58,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 32,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.594,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "57 of 96 human commits state their intent (structured subject or explanatory body)",
                "points": 31.7,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 57,
                      "sampled": 96
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json",
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "js/tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "js/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "js/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 96",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 96
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "good",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 23434,
              "source_files_sampled": 43,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python with type-check config (js/tsconfig.json)",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "typecheck_config_language",
                    "params": {
                      "files": "js/tsconfig.json",
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/43 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 43,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T03:21:30.917735Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/Bin-Huang/camoufox-cli.svg",
  "full_name": "Bin-Huang/camoufox-cli",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsPyPI, npm.