Whole Antidetect Catalog Donut Browser

Catalogue · ClientJS · Alternatives

ClientJS alternatives

2 entries in this register are declared substitutes for, successors to or predecessors of ClientJS, and all of them are still shipping at the last field check. ClientJS itself reads DEAD. Every row in the table below is judged by the same rubric, from the same sweep, on the same fields — this page ranks nothing and recommends nothing, because a register that has measured no population is in no position to.

Every row below is judged by the same rule as ClientJS itself, from the same field check. Supersession is only printed where a project or its author says so — this register does not infer that one tool replaces another because it is newer.


Entry Relation Licence Last push Latest release State
ClientJS this entry Apache-2.0 2023-01-08 — DEAD
FingerprintJS alternative MIT 2026-08-09 v5.2.0 · 2026-04-07 ACTIVE
ThumbmarkJS alternative MIT 2026-07-17 v1.10.1 · 2026-07-17 ACTIVE

Read the state column with the licence column. A permissively licensed project that stopped shipping is not safer than a copyleft one that did not.


What ClientJS does, so you know what you are replacing

An early general-purpose fingerprinting library from the period when the technique was still being popularised, and still linked from tutorials written long after it stopped moving.

A substitute has to do that job, not merely occupy the same category. Its surface list predates most of the modern collection points, so anything built on it is measuring the browser of another decade. It is kept here with its dates attached precisely because other lists still recommend it without them.

How this register decides what counts as an alternative

FingerprintJS, ThumbmarkJS are recorded as substitutes for the same job. The alternative relation is symmetric and carries no ordering at all: it says these things answer the same question, and it says nothing whatsoever about which answers it better.

Nothing on this page is a ranking, a score or a recommendation, and nothing on it is a detection-test result — no entry in this register has been run against any anti-bot system by this register. What the table gives you is four measured columns and one derived one, applied identically to every row.

How to read the comparison above

Every candidate reads ACTIVE or SEMI, so the choice here is genuinely about fit rather than about survival. Compare the release column rather than the push column: a project that pushes constantly and tags rarely asks you to depend on a branch, which is a different commitment from depending on a version.

Every entry in the table declares a licence, which is less common in this catalogue than it should be — the entries that declare none are grouped separately. Read the licence column beside the state column rather than after it: a permissively licensed project that stopped shipping is not a safer dependency than a copyleft one that did not.

Full entries

LicenceMIT
Pushed2026-08-09
Releasev5.2.0 · 2026-04-07
Stars28.3k
StateACTIVE
Silent5 d

FingerprintJS

ACTIVE

The open-source collector, from the company that sells the commercial identifier built on top of it.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-09 — 5 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-09
archivedfalse
latest_releasev5.2.0 · 2026-04-07
license.spdx_idMIT
stargazers_count28300
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/fingerprintjs/fingerprintjs

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-07-17
Releasev1.10.1 · 2026-07-17
Stars1.1k
StateACTIVE
Silent28 d

ThumbmarkJS

ACTIVE

Independent open-source fingerprinting library with a published component breakdown.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-17 — 28 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-17
archivedfalse
latest_releasev1.10.1 · 2026-07-17
license.spdx_idMIT
stargazers_count1100
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/thumbmarkjs/thumbmarkjs

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives


Questions about replacing ClientJS

Answered from the same fields the table above prints, and from no other source.

What is the best alternative to ClientJS?

This register does not answer that, because it publishes no ranking and has tested no tool to rank. What it can tell you is which candidates are still shipping: FingerprintJS, ThumbmarkJS. The rest of the decision is fit, licence and how much of your own stack you are prepared to change.

Are these ClientJS alternatives still maintained?

FingerprintJS reads ACTIVE, ThumbmarkJS reads ACTIVE. Each of those states is derived from that entry's own measured fields by the rubric in force, at the field check printed in the folio, and the clause that produced it is printed on the entry page.

Why does this list not rank the alternatives?

Because a ranking would be an opinion wearing a number's clothes. Every figure on this site is a date, a count, an SPDX identifier or an HTTP status you can re-fetch from the endpoint named beside it, and there is no honest way to compress those into an ordering without inventing weights nobody published. The rubric sets states; it does not rate them against each other.

Where does the alternatives data for ClientJS come from?

From declared edges in the register itself, never inferred. Each edge is stored once and reversed at build time, and every field in the table is read from the same sweep that produced the rest of the catalogue. The whole set is downloadable as CC0 JSON and CSV, including the supersedes, superseded_by and alternative_to columns.


A collector is the clearest possible statement of what the other side is asking your browser, which makes this section the best place to decide what you actually need to answer. Donut Browser answers it in the engine rather than in the page: the Wayfern Chromium fork applies overrides over CDP, so a library reading a value gets it from the browser instead of from a script that patched the getter a moment earlier.

Download Donut Browser

curl -fsSL https://donutbrowser.com/install.sh | sh

macOS · Windows · Linux · Nix. Desktop only. Source, AGPL-3.0 · The ClientJS entry in full · Section 06 · the keepers' disclosure