Bruno
usebruno.comOpen-source, local-first API client that stores collections as plain text files and works seamlessly with Git. A privacy-focused alternative to cloud-based API tools.
- Homepage: usebruno.com
- GitHub: github.com/usebruno/bruno
- Web info: web-check.xyz/check/usebruno.com
Bruno Source Code
Author
Description
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
Homepage
https://www.usebruno.com/License
MIT
Created
27 Sept 22
Last Updated
12 Jun 26
Latest version
Primary Language
JavaScript
Size
51,097 KB
Stars
44,860
Forks
2,571
Watchers
44,860
Language Usage
Star History
Top Contributors
-
@helloanoop (1415)
-
@lohxt1 (344)
-
@pooja-bruno (201)
-
@lohit-bruno (182)
-
@naman-bruno (171)
-
@Pragadesh-45 (158)
-
@sanish-bruno (113)
-
@abhishek-bruno (103)
-
@bijin-bruno (78)
-
@sid-bruno (75)
-
@sanjaikumar-bruno (73)
-
@chirag-bruno (63)
-
@sanjai0py (55)
-
@gopu-bruno (46)
-
@shubh-bruno (42)
-
@Its-treason (39)
-
@ramki-bruno (33)
-
@devendra-bruno (32)
-
@therealrinku (31)
-
@barelyhuman (30)
-
@survivant (28)
-
@pietrygamat (25)
-
@ganesh-bruno (21)
-
@DogukanUrker (19)
-
@anusreesubash (18)
-
@maintainer-bruno (15)
-
@dcoomber (14)
-
@jsoref (14)
-
@prateek-bruno (13)
-
@sreelakshmi-bruno (13)
-
@anusree-bruno (12)
-
@n00o (12)
-
@sharan-bruno (11)
-
@dependabot[bot] (11)
-
@PChaparro (11)
-
@nelup20 (11)
-
@grubersjoe (11)
-
@ajaishankar (11)
-
@dozed (10)
-
@NikHillAgar (10)
-
@snippetkid (9)
-
@Scotsoo (9)
-
@jwetzell (9)
-
@martinsefcik (8)
-
@awinder (8)
-
@arnaduga (8)
-
@tlaloc911 (8)
-
@sundram-bruno (8)
-
@baptpln (8)
-
@lared (7)
-
@tpyle (7)
-
@jokj624 (7)
-
@rreyn-bruno (6)
-
@mvmn (6)
-
@mjhcorporate (6)
-
@jeromed-weekera (6)
-
@cwilper (6)
-
@brahma-dev (6)
-
@poojabela (5)
-
@notfounnd (5)
-
@jaktestowac (5)
-
@stupidly-logical (5)
-
@kapami (5)
-
@josbiz (5)
-
@fgrande (5)
-
@pongpayak-rsp (5)
-
@Beedhan (5)
-
@akshat-khosya (5)
-
@qweme32 (4)
-
@james-ha-bruno (4)
-
@dnnr1 (4)
-
@krummbar (4)
-
@AyushNigam-1 (4)
-
@mirkogolze (4)
-
@depapp (4)
-
@end3rbyte (4)
-
@adarshlilha (4)
-
@acostinescu (4)
-
@BrandonGillis (4)
-
@jarne (4)
-
@luizfonseca (4)
-
@mheidinger (4)
-
@helloitsm3 (4)
-
@iamsushantk (4)
-
@nikischin (4)
-
@bplatta (4)
-
@brunohpaiva (3)
-
@zyrouge (3)
-
@shash68i (3)
-
@sachin-thakur-bruno (3)
-
@aviskase (3)
-
@fantpmas (3)
-
@dssagar93 (3)
-
@rickyl3aks (3)
-
@rsilvr (3)
-
@Cibico99 (3)
-
@panda7789 (3)
-
@lanthoor (3)
-
@Joseph-PS (3)
-
@j0k3r (3)
Recent Commits
-
Sid (12 Jun 26)
fix(snapshot): folder nested script tab interactivity and tests (#8225) * fix(snapshot): folder script interactivity * fix: add tests for collection scripts
-
Sid (12 Jun 26)
chore: sec updates (#8193) * chore: reset + atomic updates * chore: surgically update protobufjs * chore: dedupe axios
-
sachin-thakur-bruno (12 Jun 26)
feat(dev-tools-rquest-resize): dev tools details panel can be resized horizontally via a drag handle (#8234)
-
sachin-thakur-bruno (12 Jun 26)
feat(dev-tools)/adds sorting on columns with verticle borders (#8238)
-
gopu-bruno (12 Jun 26)
fix(workspace): keep workspace nav tabs visible when editing docs (#8249)
-
Bhavik Mehta (12 Jun 26)
fix: show unsaved changes prompt when closing tab with Cmd+W (#8245)
-
gopu-bruno (12 Jun 26)
feat(workspace): move external collections into the workspace (#8196)
-
Pooja (11 Jun 26)
fix(timeline): scope scripted requests to their own request (#8210) * fix(timeline): scope scripted requests to their own request * fix: oauth playwright test
-
sachin-bruno (10 Jun 26)
fix(size/L): Preserve folder order from seq attribute (#8213)
-
sachin-thakur-bruno (10 Jun 26)
fix(SSE-text/event-stream): sse response body is empty in res.getBody() for app and cli (#8212)
-
naman-bruno (10 Jun 26)
feat: integrate AIAssist for script editing (#8220)
-
Bijin A B (09 Jun 26)
Revert "fix: open panes at default size on expand from collapsed state (#8133)" (#8217)
-
gopu-bruno (09 Jun 26)
fix: open panes at default size on expand from collapsed state (#8133) * fix(tabs): open panes at default size on expand from collapsed state * chore: shorten comment in pane expand reducers * test(tabs): add tabs collapse/expand reducer tests * test(tabs): assert expand reducers preserve the other pane's collapse flag
-
sharan-bruno (09 Jun 26)
fix(ui): prevent empty header row from persisting state and crashing CLI (#8167) * fix: 3228 Empty header row persists in state, file, and crashes CLI * fix: refactor test steps for auto-append empty header row functionality * fix: update key column identification to use isKeyField property * fix: prevent duplicate empty rows in EditableTable and improve empty row detection * fix: update addMultipartFileToLastRow to target the last row correctly * addressed review comment
-
sharan-bruno (09 Jun 26)
fix(cli): use path name for classname in JUnit reports instead of request URL (#8169) * fix: 3123 CLI JUnit Report: classname Uses Request URL Instead of Request Name * fix: update classname in JUnit report to use request path instead of name * fix: update testcase classname in JUnit report to use request path instead of request name * fix: update JUnit report classname to use API paths instead of collection paths * fix: update classname in JUnit report to use backslashes for Windows compatibility * fix: update JUnit report file paths to use API paths instead of mock paths
-
sharan-bruno (09 Jun 26)
fix(grpc): gRPC request loses all messages except the first on save for yaml collection (#8203) * fix(grpc): gRPC request loses all messages except the first on save for yaml collection * fix(grpc): enhance gRPC locators and improve message handling in tests
-
shubh-bruno (09 Jun 26)
fix(generate-code)!: generate code URL issues (#8136)
-
sharan-bruno (09 Jun 26)
fix(tests): update timeline item locators and improve response status code assertion (#8202)
-
sharan-bruno (09 Jun 26)
fix(tests): update locators for save button in presets indicator tests (#8201) docs: add gRPC request flow documentation docs: add HTTP request execution flow documentation
-
Chirag Chandrashekhar (08 Jun 26)
test(core): current mount pipeline (#7466)
-
sharan-bruno (08 Jun 26)
fix(ui): correct “modified” indicator state across collection, folder, request, and presets/auth tabs (#3386) (#8027) * fix: 3296 Folder-level No Auth inheritance is ignored; requests still use Collection Auth
-
Pooja (08 Jun 26)
feat(ws): multiple messages support in websockets (#8115) * feat: ws multi message * fix * fix * fix * improve: UX * improve: new message ui * fix * fix * fix * fix * fix * fix: rename message title * chore: cleanup * change: add message color * fix(websocket): correct cursor and truncate long message names --------- Co-authored-by: Sid <[email protected]>
-
Abhishek S Lal (05 Jun 26)
docs: update README to include Bruno CLI and Docker usage instructions (#8184)
-
rajashreehj-bruno (05 Jun 26)
fix/3112 - Postman import: OAuth2 Implicit Grant Type Silently Converted to Client Credentials on Import (#8113) * fix/3112 - Postman import: OAuth2 Implicit Grant Type Silently Converted to Client Credentials on Import * fix/3112: Postman import: OAuth2 Implicit Grant Type Silently Converted to Client Credentials on Import * fix/3112 - Postman import: OAuth2 Implicit Grant Type Silently Converted to Client Credentials on Import * fix/3112 * Implicit grant type * Oauth2 implicit grant type test case
-
Pooja (04 Jun 26)
rm: deps array (#8181)
-
Sundram (04 Jun 26)
fix(bruno-app): use primary accent in OpenAPI Sync settings modal (#8161) * fix(bruno-app): use primary accent in OpenAPI Sync settings modal Active state for the Auto-check for updates toggle and the URL/File mode buttons in the Connection Settings modal now use the same primary theme accent as the Save button and the active Check interval pill, matching visual consistency across themes. Refs: BRU-3409 * fix(bruno-app): refine OpenAPI Sync settings modal accents Keep the auto-check toggle on the primary accent, but restore the URL/File source buttons to their neutral active style and make the check-interval pills use an inline yellow style (accent border + tint + accent text) instead of a solid primary fill, matching the Appearance theme toggle. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> --------- Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
-
naman-bruno (04 Jun 26)
feat: AI features into preferences and Redux store (#8178)
-
Pooja (04 Jun 26)
fix(proxy): refresh cached PAC content on demand (#8173)
-
prateek-bruno (03 Jun 26)
fix: openapi spec export crash on websocket request (#8132) * fix: only accept http and graphql for openapi spec * chore: add test Co-authored-by: Prateek Sunal <[email protected]> --------- Co-authored-by: Prateek Sunal <[email protected]>
-
Abhishek Patil (01 Jun 26)
fix(proxy): proxy config export from v2 to import in v3 (#8112) * FIXED regression for proxy config from v2 to v3 * REMOVED console.log * ADDED test case with fixture to test proxy import * ADDED proxy handling for older brunoConfig in packages/bruno-electron/src/utils/collection-import.js * RESOLVED githiub converstation changed afterAll --> afterEach * ADDED guard to transformProxyConfig(brunoConfig.proxy) function
Bruno Security
Security Advisories (4)
- critical Patched CVSS 9.8
CVE-2026-34841 Axios npm Supply Chain Incident Impacting @usebruno/cli
- critical Patched
GHSA-246j-fv2m-6jhx SHA1-Hulud supply-chain compromise (transitive @postman/tunnel-agent) — Upgrade @usebruno/cli to 2.14.4
- high Patched
CVE-2025-30354 Safe-Mode ignored in Asserts expressions
- high Patched
CVE-2025-30210 XSS On Environment Name
Bruno Website
Website
Bruno - The Git-Native API Client
Bruno is the Git-native API client for REST, GraphQL, gRPC and Websocket. A local and open-source solution to Postman. Fast, developer-first, and no cloud syncing.
Redirects
Does not redirect
Security Checks
All 65 security checks passed
Server Details
- IP Address 100.27.249.156
- Hostname ec2-100-27-249-156.compute-1.amazonaws.com
- Location Ashburn, Virginia, United States of America, NA
- ISP Amazon Technologies Inc.
- ASN AS14618
Associated Countries
-
US -
CA -
JP
Safety Score
Website marked as safe
100%
Blacklist Check
www.usebruno.com was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
Bruno Reviews
More Developer Tools
-
Open-source offline toolbox for developers, with utilities for JSON, YAML, hashes, JWTs, Base64, text comparison and more. Useful alternative to pasting sensitive data into random online tools.
About the Data: Bruno
Change History
- Added #614
API
You can access Bruno's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/bruno The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share Bruno
Help your friends compare Developer Tools, and pick
privacy-respecting software and services.
Share Bruno and Awesome Privacy with your network!