V5 (#42)

- Improve fingerprint stability on desktop multi-monitor setups and mobile
- Improve fingerprint stability mobile devices
- Reduce false-positive changes between sessions on the same device, especially desktops.
- Remove low-entropy / deprecated signals: cookieEnabled, doNotTrack, plugins/mimeTypes

Author: damianobarbati

.gitignore

@@ -1,2 +1,5 @@
 node_modules/
 .idea/
+.vscode/
+.DS_Store
+lcov.info

.nvmrc

@@ -1 +1 @@
-v22.6
+v25.6

README.md

@@ -1,10 +1,35 @@
 # get-browser-fingerprint
 
-Zero dependencies package exporting a single and fast (<50ms) asynchronous function returning a browser fingerprint, without requiring any permission to the user.  
+A single and fast (<50ms) asynchronous function returning a browser fingerprint, without requiring any permission to the user.  
+
+## Assumptions
+
+The function is targeting stock installations of the following browsers (no extensions or add-ons installed):
+- Google Chrome (desktop and Android)
+- Mozilla Firefox (desktop, default tracking protection, no custom privacy flags enabled)
+- Microsoft Edge (desktop and Android)
+- Apple Safari (macOS)
+- Safari on iOS / iPadOS
+
+Explicit assumptions:
+- No privacy-focused extensions or add-ons installed.
+- Browser privacy settings left at factory defaults (no manual changes to fingerprint resistance features).
+- No hardened, anti-detect or heavily modified browser variants.
+
+Under these conditions the collected signals retain meaningful entropy in February 2026:
+- Canvas rendering (stable on Chrome, Edge, Firefox default; noisy or low-entropy on iOS Safari and partially on macOS Safari)
+- WebGL unmasked vendor and renderer (strong on desktop, more uniform on mobile)
+- Offline audio context (useful on Chrome, Edge, Firefox; heavily restricted on Safari)
+- WebGPU properties (if available; low but increasing entropy)
+- Locally installed fonts (valuable mainly on desktop Windows and macOS)
+- Passive signals (hardwareConcurrency, deviceMemory, screen, timezone, languages, etc.)
+
+On browsers with strong default fingerprint resistance (Safari iOS, certain Firefox modes) entropy and stability decrease significantly.  
+The script does not attempt to bypass intentional randomization or hardening.
 
 ## Usage
 
-Get browser fingerprint:  
+Get browser fingerprint:
 ```js
 import getBrowserFingerprint from 'get-browser-fingerprint';
 const fingerprint = await getBrowserFingerprint();
@@ -19,9 +44,13 @@ Options available:
 
 To test locally:
 ```sh
-fnm install
-pnpm install
+fnm install # nodejs from .nvmrc
+npm install -g corepack
+corepack enable # package manager from package.json
+corepack install # package manager from package.json
+pnpm install # install deps
 pnpm exec playwright install chromium
+pnpm exec playwright install firefox
 pnpm test
 ```
 

biome.json

@@ -1,34 +1,26 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.2.2/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.4.0/schema.json",
+  "assist": { "actions": { "source": { "organizeImports": "on" } } },
   "vcs": {
     "enabled": true,
     "clientKind": "git",
     "useIgnoreFile": true
   },
   "formatter": {
     "indentStyle": "space",
-    "indentWidth": 2,
-    "lineWidth": 160,
-    "lineEnding": "lf"
+    "lineWidth": 180
+  },
+  "javascript": {
+    "formatter": {
+      "quoteStyle": "single"
+    }
   },
   "linter": {
-    "enabled": true,
-    "rules": {
-      "recommended": true,
-      "a11y": {
-        "recommended": false
-      },
-      "suspicious": {
-        "recommended": false
-      },
-      "correctness": {
-        "noUnusedImports": {
-          "level": "error"
-        },
-        "noUnusedVariables": {
-          "level": "error"
-        }
-      }
+    "enabled": true
+  },
+  "html": {
+    "formatter": {
+      "enabled": true
     }
   }
 }

package.json

@@ -4,8 +4,13 @@
   "author": "Damiano Barbati <damiano.barbati@gmail.com> (https://github.com/damianobarbati)",
   "repository": "https://github.com/damianobarbati/get-browser-fingerprint",
   "license": "MIT",
-  "main": "src/index.js",
+  "packageManager": "pnpm@10.28.2",
+  "engines": {
+    "node": ">=25.6",
+    "pnpm": ">=10.28"
+  },
   "type": "module",
+  "main": "src/index.js",
   "files": [
     "README.md",
     "package.json",
@@ -14,13 +19,13 @@
   ],
   "types": "./src/index.d.ts",
   "scripts": {
+    "postinstall": "pnpm audit --audit-level critical",
     "lint": "biome check --write",
-    "test": "vitest run"
+    "test": "node --test --test-reporter=spec --test-reporter-destination=stdout"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.2.2",
-    "@playwright/test": "^1.55.0",
-    "serve": "^14.2.4",
-    "vitest": "^3.2.4"
+    "@biomejs/biome": "^2.4.0",
+    "@playwright/test": "^1.58.2",
+    "serve": "^14.2.5"
   }
 }