Show HN: Robust LLM extractor for websites in TypeScript (github.com)

by andrew_zhong 49 comments 72 points
Read article View on HN

49 comments

[−] spiderfarmer 51d ago
My platform has 24M pages on 8 domains and these NASTY crawlers insist on visiting every single one of them. For every 1 real visitor there are at least 300 requests from residential proxies. And that's after I blocked complete countries like Russia, China, Taiwan and Singapore.

Even Cloudflares bot filter only blocks some of them.

I'm using honeypot URLs right now to block all crawlers that ignore rel="nofollow", but they appear to have many millions of devices. I wouldn't be surprised if there are a gazillion residential routers, webcams and phones that are hacked to function as a simple doorways.

Things are really getting out of hand.

[−] dmos62 50d ago
Have you considered recaptcha v2 and similar? Proof of work might slow them down. Sounds pretty bad. Would be great if Cloudflare, Datadome, etc. were doing this for you and thus banning these devices for everyone.
[−] cj 51d ago
What crawlers are using residential proxies?
[−] spiderfarmer 51d ago
Now if they identified themselves, I could block them.

I'd put my money on Chinese AI model makers, but I don't trust any company that is in desperate need of fresh data.

[−] sheept 51d ago

> LLMs return malformed JSON more often than you'd expect, especially with nested arrays and complex schemas. One bad bracket and your pipeline crashes.

This might be one reason why Claude Code uses XML for tool calling: repeating the tag name in the closing bracket helps it keep track of where it is during inference, so it is less error prone.

[−] andrew_zhong 51d ago
Yeah that's a good observation. XML's closing tags give the model structural anchors during generation — it knows where it is in the nesting. JSON doesn't have that, so the deeper the nesting the more likely the model loses track of brackets.

We see this especially with arrays of objects where each object has optional nested fields. For complex nested objects, the model can get all items well formatted but one with an invalid field of wrong type. That's why we put effort into the repair/recovery/sanitization layer — validate field-by-field and keep what's valid rather than throwing everything out.

[−] olafura 51d ago
Unless I'm totally misunderstanding something it's not xml but special tokens for the tokenizer someone smarter than me might know https://medium.com/@nisarg.nargund/why-special-tokens-matter...
[−] sheept 50d ago
Not in Claude Code, where asking it to print the XML used for tool calling makes it accidentally trigger the tool call
[−] faangguyindia 51d ago
Hardly matters, this isn't a problem that you'd have these days with modern LLMs.

Also, a model can always use a proxy to turn your tool calls into XML

And feed you back json right away and you wouldn't even know if any transformation did take place.

[−] andrew_zhong 51d ago
We do see fewer invalid JSONs on latest bigger LLMs but still can happen on smaller and cheaper models. There is also case when input is truncated or a required field not found, which are inherently difficult.

On XML vs JSON, I think the goal here is to generate typed output where JSON with zod shines - for example the result can type check and be inserted to database typed columns later

[−] faangguyindia 51d ago
Thing is even with XML LLM will fail every now and then.

I've built an agent in both tool calling and by parsing XML

You always need a self correcting loop built in, if you are editing a file with LLM you need provide hints so LLM gets it right the second time or 3rd or n time.

Just by switching to XML you'll not get that.

I used to use XML now i only use it for examples in in system prompt for model to learn. That's all

[−] andrew_zhong 51d ago
Agreed - in this project I did a one path sanitation to recover invalid optional / nullable fields or discard invalid objects in nested array.

I know multi path LLM approaches exist: e.g. generating JSON patches

https://github.com/hinthornw/trustcall

[−] AbanoubRodolf 51d ago
[flagged]
[−] plastic041 51d ago

> Avoid detection with built-in anti-bot patches and proxy configuration for reliable web scraping.

And it doesn't care about robots.txt.

[−] andrew_zhong 51d ago
Good point. The anti-bot patches here (via Patchright) are about preventing the browser from being detected as automated — things like CDP leak fixes so Cloudflare doesn't block you mid-session. It's not about bypassing access restrictions.

Our main use case is retail price monitoring — comparing publicly listed product prices across e-commerce sites, which is pretty standard in the industry. But fair point, we should make that clearer in the README.

[−] plastic041 51d ago
robots.txt is the most basic access restrictions and it doesn't even read it, while faking itself as human[0]. It is about bypassing access restrictions.

[0]: https://github.com/lightfeed/extractor/blob/d11060269e65459e...

[−] zendist 51d ago
Regardless. You should still respect robots.txt..
[−] messe 51d ago

> It's not about bypassing access restrictions.

Yes. It is. You've just made an arbitrary choice not to define it as such.

[−] Flux159 51d ago
This looks pretty interesting! I haven't used it yet, but looked through the code a bit, it looks like it uses turndown to convert the html to markdown first, then it passes that to the LLM so assuming that's a huge reduction in tokens by preprocessing. Do you have any data on how often this can cause issues? ie tables or other information being lost?

Then langchain and structured schemas for the output along w/ a specific system prompt for the LLM. Do you know which open source models work best or do you just use gemini in production?

Also, looking at the docs, Gemini 2.5 flash is getting deprecated by June 17th https://ai.google.dev/gemini-api/docs/deprecations#gemini-2.... (I keep getting emails from Google about it), so might want to update that to Gemini 3 Flash in the examples.

[−] rsafaya 48d ago
Maybe it's time scrapers actually paid publishers via something like HTTP 402 for their data instead of an arms race with Cloudflare on one side and residential proxies on the other.
[−] l3x4ur1n 51d ago
Would this work for my use case?

I need to extract article content, determine it's sentiment towards a keyword and output a simple json with article name, url, sentiment and some text around the found keyword.

Currently I'm having problems with the json output, it's not reliable enough and produces a lot of false json.

[−] letier 51d ago
The extraction prompt would need some hardening against prompt injection, as far as i can tell.
[−] vetler 51d ago
My instinct was also to use LLMs for this, but it was way to slow and still expensive if you want to scrape millions of pages.
[−] dmos62 51d ago
What's your experience with not getting blocked by anti-bot systems? I see you've custom patches for that.
[−] andrew_zhong 50d ago
[Update] I will replace the stealth browser with plain playwright and remove anti-bot as a feature.
[−] AirMax98 51d ago
This feels like slop to me.

It may or may not be, but if you want people to actually use this product I’d suggest improving your documentation and replies here to not look like raw Claude output.

I also doubt the premise that about malformed JSON. I have never encountered anything like what you are describing with structured outputs.

[−] zx8080 51d ago
Robots.txt anyone?
[−] Remi_Etien 51d ago
[flagged]
[−] warwickmcintosh 51d ago
[dead]
[−] hikaru_ai 51d ago
[dead]
[−] johnwhitman 51d ago
[flagged]
[−] gautamborad 51d ago
[dead]
[−] openclaw01 51d ago
[dead]
[−] paxrel_ai 51d ago
[dead]
[−] Ryand1234 49d ago
[flagged]
[−] moci 51d ago
[dead]
[−] ferreyadinarta 51d ago
[flagged]
[−] chattermate 51d ago
[flagged]