ricibrowser

A lightweight two-engine browser automation module built entirely on the Chrome DevTools Protocol (CDP). No Playwright, no Puppeteer, no selenium.

Engines

Engine	Use case	Technology
Lightpanda (fast path)	crawl, recon, endpoint discovery, non-JS-heavy targets	Zig-based headless engine, CDP at `ws://127.0.0.1:9222`
CDP-Chrome (thorough path)	DAST, JS-heavy targets, auth flows, anti-bot	Custom CDP client driving the user's real installed Chrome

Install

pip install ricibrowser

# For the fast path (optional):
bash scripts/install_lightpanda.sh
lightpanda serve --host 127.0.0.1 --port 9222

# For the thorough path:
# Just have Google Chrome installed on your system.

Quick start

import asyncio
from ricibrowser import Engine, EngineConfig

async def main():
    engine = Engine(EngineConfig())

    # Fast path (Lightpanda) — crawl/recon
    page = await engine.fast_browse("https://example.com")
    print(f"Title: {page.title}")
    print(f"Text: {page.text[:200]}")
    print(f"Links: {len(page.links)}")

    # Thorough path (CDP-Chrome) — DAST/auth flows
    session = await engine.create_session()
    await session.navigate("https://example.com/login")
    await session.fill("#username", "admin")
    await session.fill("#password", "pass")
    await session.click("#login-btn")

    # Cookies persist across sessions via CookieJar
    await session.navigate("https://example.com/dashboard")  # authenticated!

    # JS evaluation in isolated world (never Runtime.enable on main world)
    count = await session.evaluate("document.querySelectorAll('script').length")

    # Network capture (opt-in, off by default)
    engine2 = Engine(EngineConfig(debug_network=True))
    session2 = await engine2.create_session()
    # ... browse ...
    flows = engine2.network.to_dict()

    await engine.close()

asyncio.run(main())

Stealth

navigator.webdriver suppressed via --disable-blink-features=AutomationControlled (Blink-level, not JS injection)
Uses the user's real installed Chrome (not bundled Chromium) — TLS/JA3 fingerprint matches a real Chrome release
Never calls Runtime.enable on the main world — isolated worlds only
Console.enable off by default — only enabled in explicit debug mode
Network.enable off by default — known CDP detection vector

Architecture

See ARCHITECTURE.md for the full design.

License

MIT

Release files for ricibrowser 0.2.17

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ricibrowser 0.2.17
File	Size	Uploaded
ricibrowser-0.2.17.tar.gz	62.3 kB	Aug 7, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for ricibrowser 0.2.17
File	Interpreter	ABI	Platform	Reset
ricibrowser-0.2.17-py3-none-any.whl 59.4 kB Aug 7, 2026	Python 3	none	any	Details

Total release size: 121.7 kB

Release files / ricibrowser-0.2.17.tar.gz

Download URL	ricibrowser-0.2.17.tar.gz
Size	62.3 kB
Tags	Source
SHA-256 checksum How to use checksums	`9b14f4ae03ce9936c0bd7d9c68b706a887ac612c21c85398fc16863038687811`
BLAKE2b-256 checksum How to use checksums	`9b49476a588873ed5491bd923a0a337cf770e0f44f548de9112e8fa0d13b7d80`
Upload date	Aug 7, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.2.0 CPython/3.12.3`

Release files / ricibrowser-0.2.17-py3-none-any.whl

Download URL	ricibrowser-0.2.17-py3-none-any.whl
Size	59.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`bc56b488f1c859ac0289ac077c0e5ca3d243855ab30fb6d9539ae0650c88f629`
BLAKE2b-256 checksum How to use checksums	`5f9bed6f77d23bbfb63024fb287ec2cd298a15bc9d1ccb4b75b2bcfa14ecfc20`
Upload date	Aug 7, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.2.0 CPython/3.12.3`