Donut Browser
ACTIVE
Anti-detect browser and profile manager. Ships the Wayfern Chromium fork, which spoofs at the engine level over CDP rather than by patching JavaScript, plus a local REST API and MCP server on the user's own machine.
curl -fsSL https://donutbrowser.com/install.sh | sh
Homebrew cask donut · deb/rpm/AppImage · APT and RPM repos at repo.donutbrowser.com · Nix flake. Desktop only. Source, AGPL-3.0
Evidence
Why ACTIVE: pushed_at = 2026-08-12 — 2 days, within the 90-day ACTIVE threshold.
| Field | Value at this printing |
|---|---|
| pushed_at | 2026-08-12 |
| archived | false |
| latest_release | v0.29.3 · 2026-08-12 |
| license.spdx_id | AGPL-3.0 |
| stargazers_count | 3600 |
| http_status | 200 |
| fetched_at | 2026-08-14T09:12:00Z |
| rubric_edition | 2nd, in force |
Endpoint: GET https://api.github.com/repos/zhom/donutbrowser
A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON
Both halves are in the repo — the desktop app and the sync server — under AGPL-3.0, and a grep of src/, src-tauri/src and the manifests finds no analytics SDK. Twelve releases between 2026-03-24 and 2026-08-12. Its README's claim about not being detected by named vendors is unsupported by anything in that repo; ignore it and judge the fields. — ED.