Skip to content

figranium

Automation & Workflows

Self‑hosted, block‑first automation control plane for deterministic browser workflows without sending data to SaaS

TypeScript Latest v0.12.2 · 1mo ago Security brief →

Features

  • Block‑based visual workflow builder with click/type/wait/JS execution actions
  • Task API and CLI (`npx figranium`) for programmatic triggering and variable injection
  • Automatic capture storage of screenshots, recordings, and cookies
  • Integrated proxy management with rotation per task
  • Scheduling via interval or cron expressions

Recent releases

View all 49 releases →
v0.12.2 Security relevant
Security fixes
  • Ollama SSRF hardening with strict settings and API target validation
Notable features
  • Cron next-run calculation optimization
  • Sandbox proxy optimization for extraction flows
  • Block editing interaction improvements
v0.12.1 Mixed
⚠ Upgrade required
  • Extraction scripts must be migrated to use data.html() instead of $$data.html().
  • Explicitly enable ALLOW_PRIVATE_NETWORKS if internal network access via Docker bridges is required.
Breaking changes
  • ALLOW_PRIVATE_NETWORKS is now disabled by default, which may block access to internal networks.
  • Extractor scripts migrated to use data.html() instead of $$data.html().
Security fixes
  • Blocked host.docker.internal in SSRF protection via url-utils.js to prevent internal network probes via Docker bridges.
Notable features
  • Global AI model settings for OpenAI, Anthropic, Gemini, etc.
  • Get Content action to extract full page content and store it as a variable
v0.12.0 Mixed

Added Ollama integration for local LLM support in CSS selector and script generation. Overhauled DOM context cleaning by stripping non-essential tags/attributes to reduce token usage. Introduced HTTP Request action blocks for API interaction. Implemented CSP headers, SSRF protection, and WeakMap caching.

v0.11.4 Security relevant
Security fixes
  • SSRF via webhook redirects and Baserow output provider
  • Sandbox escape via getPrototypeOf
  • Session security hardening with httpOnly cookies and HSTS
Notable features
  • Dashboard task search with keyboard shortcuts
  • Performance improvements including 70x table detection speedup

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
429
Forks
11
Languages
TypeScript JavaScript CSS

Install & Platforms

Install via
docker-compose docker npm shell-script
Platforms
linux macos arm64

Beta — feedback welcome: [email protected]