Skip to content

figranium

Automation & Workflows

Self‑hosted, block‑first automation control plane for deterministic browser workflows without sending data to SaaS

TypeScript Latest v0.13.0 · 27d ago Security brief →

Features

  • Block‑based visual workflow builder with click, type, wait, hover and JS execution actions
  • Task API and CLI (`npx figranium`) for remote or local trigger with variable injection
  • Automatic capture storage of screenshots/recordings and cookies in a dedicated captures tab
  • Integrated proxy management – host, rotate, import HTTP/SOCKS proxies per task
  • Scheduling via UI intervals or cron expressions, plus security features like auth, IP allowlists and audit trails

Recent releases

View all 50 releases →
Config change
v0.13.0 Breaking risk
Breaking upgrade

NPM retirement + Docker migration + AI selector fix

v0.12.2 Security relevant
Security fixes
  • Ollama SSRF hardening with strict settings and API target validation
Notable features
  • Cron next-run calculation optimization
  • Sandbox proxy optimization for extraction flows
  • Block editing interaction improvements
v0.12.1 Mixed
⚠ Upgrade required
  • Extraction scripts must be migrated to use data.html() instead of $$data.html().
  • Explicitly enable ALLOW_PRIVATE_NETWORKS if internal network access via Docker bridges is required.
Breaking changes
  • ALLOW_PRIVATE_NETWORKS is now disabled by default, which may block access to internal networks.
  • Extractor scripts migrated to use data.html() instead of $$data.html().
Security fixes
  • Blocked host.docker.internal in SSRF protection via url-utils.js to prevent internal network probes via Docker bridges.
Notable features
  • Global AI model settings for OpenAI, Anthropic, Gemini, etc.
  • Get Content action to extract full page content and store it as a variable
v0.12.0 Mixed

Added Ollama integration for local LLM support in CSS selector and script generation. Overhauled DOM context cleaning by stripping non-essential tags/attributes to reduce token usage. Introduced HTTP Request action blocks for API interaction. Implemented CSP headers, SSRF protection, and WeakMap caching.

v0.11.4 Security relevant
Security fixes
  • SSRF via webhook redirects and Baserow output provider
  • Sandbox escape via getPrototypeOf
  • Session security hardening with httpOnly cookies and HSTS
Notable features
  • Dashboard task search with keyboard shortcuts
  • Performance improvements including 70x table detection speedup

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
432
Forks
12
Languages
TypeScript JavaScript CSS

Install & Platforms

Install via
docker-compose

Beta — feedback welcome: [email protected]