Firefly III
firefly-iii.orgSelf-hostedA free and open source personal finance manager. Firefly III features a clean and clear UI, is easy to set up and use, and is backed by a strong community. Regular updates bring new features, improvements, and fixes. There's also a hass.io addon, and compatibility with Home Assistant. Ensure your server is securely configured.
- Homepage:firefly-iii.org
- GitHub:github.com/firefly-iii/firefly-iii
- Web info:web-check.xyz/check/firefly-iii.org
Firefly III Source Code
Author
Description
Firefly III: a personal finances manager
Homepage
https://firefly-iii.org/Repository
- LicenseAGPL-3.0
- Created28 Jun 14
- Primary languagePHP
- Size318,779 KB
- Stars24,347
- Forks2,254
- Watchers24,347
Top Contributors
@JC5 (20800)
@dependabot[bot] (851)
@github-actions[bot] (793)
@mergify[bot] (150)
@SDx3 (131)
@roberthorlings (44)
@lguima (40)
@Sobuno (27)
@michaelhthomas (18)
@bnw (17)
@tasnim0tantawi (17)
@hamuz (16)
@tonicospinelli (13)
@zjean (13)
@rubenverhoef (9)
@GeoffreyFrogeye (9)
@ctrl-f5 (8)
@patrickkostjens (8)
@vbali (7)
@dakennguyen (7)
@pkoziol (7)
@webenhanced (6)
@LBreda (6)
@canoine (6)
@devlearner (6)
@niekvanderkooy (6)
@tomershvueli (5)
@bpatath (5)
@Maxco10 (5)
@Zsub (5)
@achembarpu (5)
@JeroenED (4)
@ebbz (4)
@RonaldvanMeer (4)
@lastlink (4)
@alex6480 (4)
@SanderKleykens (4)
@maksimkurb (3)
@hoshsadiq (3)
@tomwerf (3)
@StillLoading (3)
@stevewasiura (3)
@softbrix (3)
@scrutinizer-auto-fixer (3)
@Mortalife (3)
@weimdall (3)
@klepek (3)
@claystation (3)
@dennisenderink (3)
@okaufmann (2)
@paul999 (2)
@stewartmalik (2)
@timendum (2)
@vonsogt (2)
@vicmosin (2)
@anmol26s (2)
@Johnny-Malizia (2)
@mateuszkulapl (2)
@psychowood (2)
@glmdev (2)
@naveensrinivasan (2)
@emansih (2)
@elamperti (2)
@rubenvanerk (2)
@ErikFontanel (2)
@antoniomrfranco (2)
@eddybrando (2)
@maroux (2)
@fedemic (2)
@Flightkick (2)
@GeorgeHahn (2)
@gian21391 (2)
@mindlessroman (2)
@DieBauer (2)
@alazare619 (2)
@ms32035 (2)
@MihataBG (2)
@SeminarOpenCLGRP7 (2)
@NathanPERIER (2)
@ricketyboo (1)
@SuperSandro2000 (1)
@bsedin (1)
@shashankmc (1)
@simonsmiley (1)
@skuzzle (1)
@stevietv (1)
@xnyhps (1)
@schoentoon (1)
@vayakovlev (1)
@zqye (1)
@mansuf (1)
@R1DEN (1)
@pascalj (1)
@nhaarman (1)
@nicosomb (1)
@nicoschreiner (1)
@nick322 (1)
@mconway (1)
@mfix22 (1)
@melroy89 (1)
Recent Commits
No longer build v1, remove some old code.
Fix sponsorship
Rename workflow from 'Create new release' to 'Run CI' Signed-off-by: James Cole <[email protected]>
Create run-ci.yml Signed-off-by: James Cole <[email protected]>
Delete .github/workflows/psalm.yml Signed-off-by: James Cole <[email protected]>
Delete .github/workflows/sonarcloud.yml Signed-off-by: James Cole <[email protected]>
Update Psalm Security Scan action version Signed-off-by: James Cole <[email protected]>
Update sonarcloud.yml Signed-off-by: James Cole <[email protected]>
Merge pull request #12585 from firefly-iii/dependabot/composer/composer-252f2de36c Bump league/commonmark from 2.8.2 to 2.9.0 in the composer group across 1 directory
Bump league/commonmark in the composer group across 1 directory Bumps the composer group with 1 update in the / directory: [league/commonmark](https://github.com/thephpleague/commonmark). Updates `league/commonmark` from 2.8.2 to 2.9.0 - [Release notes](https://github.com/thephpleague/commonmark/releases) - [Changelog](https://github.com/thephpleague/commonmark/blob/2.9/CHANGELOG.md) - [Commits](https://github.com/thephpleague/commonmark/compare/2.8.2...2.9.0) --- updated-dependencies: - dependency-name: league/commonmark dependency-version: 2.9.0 dependency-type: direct:production dependency-group: composer ... Signed-off-by: dependabot[bot] <[email protected]>
Update SonarCloud action to use sonarqube-scan-action Signed-off-by: James Cole <[email protected]>
Modify SonarCloud analysis workflow configuration Updated SonarCloud workflow to specify project key and organization. Signed-off-by: James Cole <[email protected]>
Merge pull request #12573 from firefly-iii/dependabot/npm_and_yarn/npm_and_yarn-84557ebc70 Bump brace-expansion from 1.1.15 to 1.1.18 in the npm_and_yarn group across 1 directory
Bump brace-expansion in the npm_and_yarn group across 1 directory Bumps the npm_and_yarn group with 1 update in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion). Updates `brace-expansion` from 1.1.15 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.15...v1.1.18) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
Merge pull request #12571 from firefly-iii/dependabot/composer/composer-c0cb037752 Bump guzzlehttp/guzzle from 7.15.1 to 7.15.2 in the composer group across 1 directory
Bump guzzlehttp/guzzle in the composer group across 1 directory Bumps the composer group with 1 update in the / directory: [guzzlehttp/guzzle](https://github.com/guzzle/guzzle). Updates `guzzlehttp/guzzle` from 7.15.1 to 7.15.2 - [Release notes](https://github.com/guzzle/guzzle/releases) - [Changelog](https://github.com/guzzle/guzzle/blob/7.15.2/CHANGELOG.md) - [Commits](https://github.com/guzzle/guzzle/compare/7.15.1...7.15.2) --- updated-dependencies: - dependency-name: guzzlehttp/guzzle dependency-version: 7.15.2 dependency-type: direct:production dependency-group: composer ... Signed-off-by: dependabot[bot] <[email protected]>
Merge pull request #12565 from firefly-iii/dependabot/github_actions/actions/stale-11 Bump actions/stale from 10 to 11
Bump actions/stale from 10 to 11 Bumps [actions/stale](https://github.com/actions/stale) from 10 to 11. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/v10...v11) --- updated-dependencies: - dependency-name: actions/stale dependency-version: '11' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
Set timezone to Europe/Amsterdam in release workflow Signed-off-by: James Cole <[email protected]>
Merge pull request #12533 from firefly-iii/dependabot/npm_and_yarn/npm_and_yarn-ca68f6365a Bump svgo from 2.8.2 to 2.8.3 in the npm_and_yarn group across 1 directory
Bump svgo in the npm_and_yarn group across 1 directory Bumps the npm_and_yarn group with 1 update in the / directory: [svgo](https://github.com/svg/svgo). Updates `svgo` from 2.8.2 to 2.8.3 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](https://github.com/svg/svgo/compare/v2.8.2...v2.8.3) --- updated-dependencies: - dependency-name: svgo dependency-version: 2.8.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
Merge pull request #12525 from firefly-iii/dependabot/npm_and_yarn/npm_and_yarn-c2e2e76f30 Bump the npm_and_yarn group across 1 directory with 2 updates
Bump the npm_and_yarn group across 1 directory with 2 updates Bumps the npm_and_yarn group with 2 updates in the / directory: [postcss](https://github.com/postcss/postcss) and [fast-uri](https://github.com/fastify/fast-uri). Updates `postcss` from 8.5.16 to 8.5.23 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.5.16...8.5.23) Updates `fast-uri` from 3.1.3 to 3.1.4 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
Merge pull request #12517 from firefly-iii/dependabot/composer/composer-a2cf776ffc Bump guzzlehttp/guzzle from 7.13.1 to 7.15.1 in the composer group across 1 directory
Bump guzzlehttp/guzzle in the composer group across 1 directory Bumps the composer group with 1 update in the / directory: [guzzlehttp/guzzle](https://github.com/guzzle/guzzle). Updates `guzzlehttp/guzzle` from 7.13.1 to 7.15.1 - [Release notes](https://github.com/guzzle/guzzle/releases) - [Changelog](https://github.com/guzzle/guzzle/blob/8.0/CHANGELOG.md) - [Commits](https://github.com/guzzle/guzzle/compare/7.13.1...7.15.1) --- updated-dependencies: - dependency-name: guzzlehttp/guzzle dependency-version: 7.15.1 dependency-type: direct:production dependency-group: composer ... Signed-off-by: dependabot[bot] <[email protected]>
Change workflow a little.
Fix quick build.
Fix more steps.
Fix var
Another attempt.
Firefly III Security
Security Advisories (4)
- mediumPatched
GHSA-6jq6-x4cx-qvcmStored XSS in Audit Log Entry view via piggy bank name (ale.twig)
- lowPatched
GHSA-5q8v-j673-m5v4User API endpoints expose all users' information to any authenticated user (IDOR)
- mediumPatched
CVE-2024-37893MFA bypass in oauth flow
- mediumPatchedCVSS 4
GHSA-29w6-c52g-m8jcC5 Firefly III 6.1.6 CSV Injection.
Firefly III Website
Website
Firefly III - A free and open source personal finance manager
Firefly III
Redirects
Does not redirect
Security Checks
All 65 security checks passed
Server Details
- IP Address172.67.137.142
- LocationSan Francisco,California,United States of America,NA
- ISPCloudFlare Inc.
- ASNAS13335
Associated Countries
US
DE
Safety Score
Website marked as safe
100%
Blacklist Check
www.firefly-iii.org was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
Firefly III Reviews
More Secure Budgeting
A local-first personal finance app
Privacy-first cross-platform personal expense tracker (Android/iOS/Web) with offline-first design. Multi-cloud sync options — self-hosted BeeCount Cloud, iCloud, Supabase, WebDAV or S3 — keep data under user control.
A lightweight, self-hosted personal finance app for recording daily transactions and analyzing spending patterns. Self-hosted, with all data staying on your own server. Supports 2FA and OICD.
A full-featured cross-platform accounting application suitable for personal and small business finance. Stable and reliable, GnuCash offers a comprehensive suite of financial management tools. Available for Windows, Mac, Linux, and Android.
Utilizes plain text files and scriptable, command-line-friendly software for bookkeeping/accounting, offering full control over data. Popular tools include Ledger, hledger, and Beancount among others, providing a flexible and vendor-independent approach to accounting.
A self-hosted, opensource, privacy-first portfolio tracking and accounting tool for crypto and more. Support for all 3 major Operating systems and docker. The tool focus is on data self-sovereignty.
About the Data: Firefly III
Edit Firefly III Data
You can edit Firefly III's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external
sources, a list of these can be found data documentation.
Origin Data
Modify Data
API
You can access Firefly III's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/firefly-iiiThe REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share Firefly III
Help your friends compare Secure Budgeting, and pick privacy-respecting software and services.
Share Firefly III and Awesome Privacy with your network!