Catalogue · Section 02 · Entry
HumanCursor
NRND
HumanCursor is a Python project catalogued in section 02 of this register. Human cursor simulation for Selenium and Playwright. It reads NRND — not recommended for new designs. It very probably still works; the register's position is that it is not where you should start, and the clause that produced that is printed further down this page.
https://github.com/riflosnake/HumanCursor
The fields this state was derived from
| Field | Value at this printing |
|---|---|
| pushed_at | 2024-11-28 |
| archived | false |
| latest_release | — |
| license.spdx_id | MIT |
| stargazers_count | 503 |
| http_status | 200 |
| fetched_at | 2026-08-14T09:12:00Z |
| endpoint | GET https://api.github.com/repos/riflosnake/HumanCursor |
| rubric_edition | 2nd, in force since 2026-08-14 |
A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON
Why it reads NRND
pushed_at = 2024-11-28 — 624 days, inside the 365–1095 day NRND band.
Not Recommended for New Designs. Works; do not start here.
Under the superseded first edition
SEMI
NRND
pushed_at = 2024-11-28 — 624 days, inside the 180–1095 day SEMI band.
The rubric in force · The superseded first edition · Errata leaf
What HumanCursor actually does
The same idea for Selenium and Playwright: simulated cursor movement with variable speed and overshoot, aimed at the same behavioural analysis layer.
What HumanCursor's maintenance signals mean
pushed_at reads 2024-11-28 — 624 days, or about 1.7 years, before the field check, which places it inside the 365-to-1095-day band the rubric calls NRND.
NRND is borrowed intact from the electronic component catalogues, where it means Not Recommended for New Designs, and it is the most useful state in this register precisely because it is not a synonym for broken. The part is still in the catalogue. You can still buy it. If you are designing something new, do not design it in. Applied here: what this project does, it very likely still does. Starting a new build on it means inheriting a maintenance gap you did not create and cannot close.
No release was captured for this entry, which this register records as unknown rather than as none. The distinction matters more than it looks: a project with no tags and a project whose tags the sweep failed to read produce the same blank cell, and printing them as the same fact would be the register asserting something it has not measured.
Where HumanCursor sits in this catalogue
HumanCursor is filed in section 02, automation stealth plugins, patches & cdp-leak fixes, whose scope is this: Patches and plugins for Puppeteer, Playwright and Selenium, plus the proxies and cursor libraries that sit beside them. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.
Filed beside it in the same section: hazetunnel (NRND), ghost-cursor (ACTIVE), BrowserForge (SEMI). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.
It is published under MIT, alongside the rest of the MIT entries in this register, and it sits with everything else currently marked NRND. Read those two facets together: a permissively licensed project that stopped shipping is not a safer dependency than a copyleft one that did not, and a filter on one axis alone will tell you the wrong thing.
Substitutes for the same job, with no claim that either is better: ghost-cursor. The alternative relation is symmetric and carries no ranking, because this register publishes no ranking of any kind. The full HumanCursor comparison table sets all of them side by side on licence, push date, release cadence and state.
What to settle before you adopt HumanCursor
Movement models age against the detectors that learn from them, so the interval since its last push is directly relevant to what it is for. Treat it as a starting point for your own path generation rather than a finished defence.
Questions readers ask about HumanCursor
Answered from this entry's own fields, at the field check printed above and at no other instant.
Is HumanCursor still maintained?
At the 2026-08-14 field check this register read pushed_at as 2024-11-28 and the archive flag as false, and the rubric in force turned those into NRND. Not Recommended for New Designs. Works; do not start here. The clause that fired is printed on this page, so you can check the arithmetic rather than take the word.
What are the alternatives to HumanCursor?
ghost-cursor are recorded as substitutes for the same job. The relation carries no ranking — this register publishes none — so read them side by side on the comparison table, which prints licence, last push, release cadence and state for each.
What licence is HumanCursor under?
MIT, read from the repository's own licence metadata at the field check rather than from a README badge. Other MIT entries are grouped together, and the no-licence-declared group is worth a look before you assume any project here carries a grant.
Why did the state recorded for HumanCursor change?
Because the rules changed, not because the world did. The same field data reads SEMI under the superseded first edition and NRND under the edition in force. Both derivations are printed on this page, and the entry appears on this printing's errata leaf with the superseded value struck rather than deleted.
Everything in section 02 is a patch applied to somebody else's automation stack, which means every one of them inherits that stack's release cadence and breaks on its own schedule. Donut Browser starts from the other end: the fingerprint handling is in the browser it ships rather than in a layer bolted onto a driver, and the local REST API and MCP server mean automation talks to it directly instead of through a patched client library.
curl -fsSL https://donutbrowser.com/install.sh | sh
macOS (DMG, Homebrew cask donut), Windows (installer and portable), Linux (deb, rpm, AppImage, with APT and RPM repositories at repo.donutbrowser.com), and a Nix flake. Desktop only — there is no mobile build target. Ten shipped languages. Source, AGPL-3.0 · its own entry, judged by the same rubric · the keepers' disclosure.