Research & web data Firecrawl
Is Firecrawl safe?
Short answer: No issues found. StackGrade's weekly scan of firecrawl/firecrawl found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. It does list 8 high-severity advisories in runtime dependencies, which don't change the label. Automated scan of commit 6b02a6c on 2 Nov 2026, not a manual audit.
Updated : the last week its score, rank or safety result changed. Checked again on 2 Nov 2026, no change.
Web scraping and crawling API that turns websites into LLM-ready data.
- 197,743 stars
- pushed 2 Nov
- AGPL-3.0
- TypeScript
#1of 52 overall#1in Research & web datasame score as Week 44
- Maintenance 30%80
- Adoption 30%81
- Docs 20%69
- Community 20%–
Score over the last 4 weeks: 77, 79, 78, 78.
All checks clean in the scan of 2 Nov 2026.
How this score works
Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.
- Maintenance: Last push 2 Nov 2026. Last 10 GitHub releases within 2 days (about 109 per 30 days), latest release 2 Nov 2026. Issue close time: fewer than 5 closed issues, so not used.
- Adoption: 197,743 stars (70%), 10,448 forks (30%).
- Docs: README 24,988 characters, 49 headings, 50 code blocks, install section: yes.
#1 of 6 in Research & web data
Ranked by score. The yellow row is this tool.
- 1Firecrawl#1 overall78No issues found
- 2Browser Use#15 overall62Caution
- 3MarkItDown#22 overall54No dependencies scanned
- 4Crawl4AI#26 overall52Caution
- 5GPT Researcher#46 overall31Caution
- 6STORM#49 overall26Caution
Safety scan, 2 Nov 2026
Automated scan of commit 6b02a6c, 1,615 files. Not a manual audit.
No issues found
- 0Critical dependency advisories8 high, 8 medium, 4 low. OSV, runtime dependencies only.
- 1Install hooksnpm scripts that run on install; none downloads remote content.
- 0Remote-code patternsFor example eval(fetch(…)).
- 18Agent files checked0 phrases flagged for review.
- 3curl | sh installersIn docs or program code. Information only.
Why this label?
No issues found by the automated scan.
Known vulnerabilities in runtime dependencies (OSV): 0 critical, 8 high, 8 medium, 4 low, 11 unrated
Also found (informational, does not change the label):
- 8 high-severity known vulnerabilities in runtime dependencies (OSV)
- 1 npm install hook, none downloading remote content
- Documents curl|sh style installer (3 occurrences, e.g. apps/api/Dockerfile)
Notes:
- 41 affected packages only in dev/test/docs manifests, not counted
- Telemetry/analytics references in code: telemetry, posthog
Automated scan of commit 6b02a6c on 2 Nov 2026, not a manual audit. 1,615 files checked. What we check
Repo activity
From the GitHub API, fetched 2 Nov 2026.
- 10+Releases, 90 daysLatest v2.11.645, 2 Nov
- –Median issue closeFewer than 5 closed issues
- 198kStarsGitHub stars
- 10.4kForks745 open issues
- 2024Repo created15 Apr 2024
10 releases in the last 30 days (GitHub releases feed, last 10 entries):
Questions about Firecrawl
Answers use this week's StackGrade data.
Is Firecrawl safe to use?
No issues found. StackGrade's weekly scan of firecrawl/firecrawl found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. It does list 8 high-severity advisories in runtime dependencies, which don't change the label. Automated scan of commit 6b02a6c on 2 Nov 2026, not a manual audit.
How does StackGrade score Firecrawl?
Firecrawl scores 78 out of 100 in Week 45: #1 of 52 tracked tools overall and #1 in Research & web data. The score combines maintenance (80), adoption (81) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.
What are the alternatives to Firecrawl?
The highest-scored other tools in Research & web data this week: Browser Use (62, Caution), MarkItDown (54, No dependencies scanned), Crawl4AI (52, Caution), GPT Researcher (31, Caution). StackGrade has not tested them hands-on.
What licence does Firecrawl use?
The licence listed for firecrawl/firecrawl is AGPL-3.0. Read the licence text before commercial use.
Compare and use it
Side by side
All facts and sources
- Type
- AI tool
- License
- AGPL-3.0
- Language
- TypeScript
- Created
- 15 Apr 2024
- Owner
- firecrawl (Organization)
- Forks
- 10,448
- Homepage
- firecrawl.dev
GitHub description: “Supercharge your AI agents with data from the web and beyond. Building the library for superintelligence. 🔥”
Sources: github.com/firecrawl/firecrawl, api.github.com/repos/mendableai/firecrawl, raw.githubusercontent.com/firecrawl/firecrawl/main/README.md. Fetched 2 Nov 2026.
Know when Firecrawl changes label
One email a week: the new top 10, the biggest score changes and every safety label that changed.
Free. Double opt-in: you confirm by email first, unsubscribe in one click.