{
  "schema_version": "2.1",
  "slug": "jo-inc-camofox-browser",
  "name": "jo-inc/camofox-browser",
  "agent_url": "https://github.com/jo-inc/camofox-browser",
  "repo_url": "https://github.com/jo-inc/camofox-browser",
  "category": "Infrastructure",
  "run_id": "run-jo-inc-camofox-browser-repotrack-2026-07-16",
  "run_at": "2026-07-16T13:14:00Z",
  "source": "hlido-repo-track",
  "review_track": "repo-surface",
  "evidence_tier": "repo-surface",
  "methodology_note": "Repo-surface track: this product is distributed as a repository (library/CLI) with no web product surface, so the score derives ONLY from measurable public-repository signals — documentation, licensing, maintenance activity, releases, traction, agent-consumability. Each checklist item carries its evidence. Score ceiling 82/100: VITAL requires hands-on behavioral testing that repo signals cannot provide. Replaces a 2026-06/07 stub that carried a default score with no evidence.",
  "checklist": [
    {
      "id": "repo_reachable",
      "task": "Repository is publicly reachable",
      "required": true,
      "pass": true,
      "evidence": "GH API 200 for jo-inc/camofox-browser"
    },
    {
      "id": "readme_present",
      "task": "README documents the product (≥500 chars)",
      "required": true,
      "pass": true,
      "evidence": "README length 34863"
    },
    {
      "id": "license_present",
      "task": "License declared",
      "required": true,
      "pass": true,
      "evidence": "MIT"
    },
    {
      "id": "install_documented",
      "task": "Install/usage instructions present",
      "required": true,
      "pass": true,
      "evidence": "install/usage section found in README"
    },
    {
      "id": "active_12mo",
      "task": "Maintained: pushed within 12 months and not archived",
      "required": true,
      "pass": true,
      "evidence": "last push 30d ago"
    },
    {
      "id": "releases_present",
      "task": "Tagged releases exist",
      "required": false,
      "pass": true,
      "evidence": "latest v1.11.2"
    },
    {
      "id": "community_traction",
      "task": "Community traction (≥50 stars)",
      "required": false,
      "pass": true,
      "evidence": "7733 stars"
    },
    {
      "id": "ci_or_tests",
      "task": "CI workflows present",
      "required": false,
      "pass": true,
      "evidence": "6 workflow file(s)"
    },
    {
      "id": "recent_commit_90d",
      "task": "Actively developed (push within 90 days)",
      "required": false,
      "pass": true,
      "evidence": "last push 30d ago"
    },
    {
      "id": "agent_consumable",
      "task": "Agent-consumable surface documented (MCP config or CLI install)",
      "required": false,
      "pass": true,
      "evidence": "CLI install line in README"
    }
  ],
  "repo_metrics": {
    "stars": 7733,
    "forks": 805,
    "open_issues": 178,
    "archived": false,
    "pushed_at": "2026-06-16T09:16:43Z",
    "license": "MIT",
    "language": "JavaScript"
  },
  "evidence_urls": [
    "https://github.com/jo-inc/camofox-browser",
    "https://api.github.com/repos/jo-inc/camofox-browser",
    "https://github.com/jo-inc/camofox-browser/releases"
  ],
  "laddoo_score": 82,
  "score": 82,
  "tier": "STEADY",
  "confidence": "medium",
  "summary": "jo-inc/camofox-browser — Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.. Repo-surface review: measured from the public repository (7733 stars, MIT, last push 2026-06-16); not hands-on tested.",
  "staleness_after": "2026-10-14",
  "editor": "Hlido Editor",
  "editorial_method": "repo-surface-track+editorial-narrative-v2",
  "hlido_opinion": {
    "headline": "A well-engineered MIT stealth browser that drops into Puppeteer/Playwright for agent scraping — strong hygiene and traction, but its whole purpose (bypassing bot detection) is a compliance and ToS minefield.",
    "body": "On pure repository signals this is one of the healthier projects in its category: MIT-licensed, 7.7k stars, six CI workflows, a frequent release cadence (v1.11.2) and a large 34k-char README. Drop-in API compatibility with Puppeteer/Playwright makes adoption cheap for agents already on those stacks. The honest caveat isn't technical — it's what the tool is for. Its stated purpose is to defeat Cloudflare, bot detection and anti-scraping, so any agent that uses it inherits the target site's Terms of Service and, in some jurisdictions, computer-access law. That makes it a capability to deploy deliberately against cooperating or owned targets, not a default dependency. The 178 open issues are worth watching against the release cadence. Repo-surface read; stealth effectiveness is an arms race we can't verify from the repo.",
    "voice": "Hlido Editor",
    "as_of": "2026-07-23",
    "editor_signature_pending": true
  },
  "tier_rationale": "STEADY (82, the repo-surface ceiling). MIT licensing, strong CI hygiene, frequent releases, drop-in compatibility and heavy traction all clear STEADY. VITAL is withheld because effectiveness against evolving detectors cannot be verified from repo signals, and the compliance profile is inherently caller-dependent.",
  "what_it_does_well": [
    "MIT-licensed and drop-in compatible with Puppeteer/Playwright — low adoption cost",
    "Unusually strong engineering hygiene for the category (6 CI workflows)",
    "Frequent tagged releases (v1.11.2) and active maintenance (push within ~30 days)",
    "Large, detailed README (~34.9k chars); solid traction (7.7k stars)"
  ],
  "what_it_fails_at": [
    "178 open issues — a sizable backlog to weigh against the release cadence",
    "Stealth effectiveness is unverifiable from the repo surface (an arms race vs. detectors)",
    "No guarantee against future breakage as anti-bot systems evolve"
  ],
  "best_for": [
    "Agents needing resilient headless browsing against cooperating or owned targets",
    "Teams already on Puppeteer/Playwright wanting a drop-in replacement"
  ],
  "not_recommended_for": [
    "Use against sites whose Terms of Service forbid automated access",
    "Compliance-sensitive organizations",
    "Anyone needing a stable, non-arms-race dependency"
  ],
  "red_flags": [
    {
      "severity": "medium",
      "note": "The core function is bypassing bot detection and anti-scraping, which can breach a target site's Terms of Service and, in some jurisdictions, computer-access law. Legality must be evaluated per target before deployment."
    }
  ],
  "compared_to": [],
  "agent_relevance": {
    "has_api": true,
    "has_cli": true,
    "has_mcp": false,
    "has_webhook": false,
    "has_sdk": true,
    "behavioral_testable": false,
    "agent_integration_path": "Drop-in Puppeteer/Playwright-compatible library an agent can call directly for headless browsing; installed via the documented CLI/package line. No hands-on behavioral test performed.",
    "agent_friendly_score": 7
  },
  "enriched_at": "2026-07-23",
  "enriched_by": "R-publish",
  "marking_signal": {
    "marking_statement": false,
    "detection_tool": false,
    "cop_signatory": null,
    "evidence_url": null,
    "checked_at": "2026-07-28",
    "source": "engine-browser-marking-retrofit"
  },
  "evidence_images": {
    "run_id": "run-b0d79ae89fbec80e-github-com",
    "base": "https://images.hlido.eu/reviews/jo-inc-camofox-browser/run-b0d79ae89fbec80e-github-com",
    "files": [
      "home.png"
    ],
    "urls": [
      "https://images.hlido.eu/reviews/jo-inc-camofox-browser/run-b0d79ae89fbec80e-github-com/home.png"
    ],
    "verified_at": "2026-07-31T09:31:41.449Z",
    "verified_count": 1,
    "note": "Screenshots captured by the Hlido engine during the reviewed run, served from R2. Every URL here was HEAD-verified at the timestamp above. `run_id` is the ENGINE run id — it differs from `scorecard.run_id` and is the only one these keys resolve under."
  }
}