Skip to content

blank3rs/heso](https:

CLI & Terminal

A Rust‑based auditable agent runtime that fetches, executes JavaScript, records every interaction, and emits signed, replayable artifacts without needing Chromium or Node.

Rust Latest v0.3.0 · 3d ago Security brief →

Features

  • Fetch web pages and run embedded JavaScript to obtain a fully hydrated DOM
  • Record all network traffic into a cassette for exact reproducibility
  • Emit signed, tamper‑evident “plat” artifacts that can be replayed off‑network
  • Support structured JSON output for successes and detailed error payloads
  • Provide CLI verbs for search, open, read, click, fill, submit, batch processing, and waiting on DOM conditions

Recent releases

View all 29 releases →
Review required
v0.3.0 Breaking risk
Crypto / TLS RBAC

Engine swap + search change

Config change
v0.2.0 Breaking risk
Breaking upgrade

Plat registry removal + Mojeek search

No immediate action
v0.1.9 New feature

Seed recording + heso-verify + PyPI fix

Review required
v0.1.8 Breaking risk
Breaking upgrade RCE / SSRF

Input verification + read default

Config change
v0.1.7 New feature

SSRF protection + JS timeout

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
16
Forks
2
Languages
Rust HTML Python
Downloads/week
1,916
NPM Maintainers
1 Single npm maintainer
Contributors
1
TypeScript
Types included ✓

Install & Platforms

Install via
pip pipx npm shell-script binary
Platforms
linux macos windows arm64

Beta — feedback welcome: [email protected]