Why you don't use the humble library? There are all your games in a huge list, ready to download with one click. No need to open the purchase pages...

Maybe he wanted to download games per bundles he has bought, instead of anything in one big list... They are just two optional views for your games, in the purchase page they are divided by bundles.

Either way, you need to click on each game separately in order to download it, which is why I guess he was asking for a gogrepo-like tool (to download all your games in one swoop, without clicking hundreds of times on links...).

What about this python script:

https://github.com/guitargeek/humblebundle-backup

That at least sounds promising. I hope it works for the HB Android games as well as I tend to have more of them, than Windows HB games.

https://github.com/MestreLion/humblebundle

is another option.

Not sure... reading the usage examples, it seemed you can download (and also install) single games, one by one, with that tool? Ie. you can't tell it "download all my HB game installers and extras, now!"?

Also it seems you must give your usename and password in the commandline. Wasn't that regarded as a security issue? I recall gogrepo.py also worked like that in the beginning (you gave your GOG username and password within the login command itself), but it was identified as a security issue and hence changed so that it prompts for those values when you run the login command.

https://www.gog.com/forum/general/gogrepopy_python_script_for_regularly_backing_up_your_purchased_gog_collection_for_full_offline_e/post6

https://www.gog.com/forum/general/gogrepopy_python_script_for_regularly_backing_up_your_purchased_gog_collection_for_full_offline_e/post11

You're correct. However, it's possible to add a "download all" functionality. Perhaps request the feature from the author? A rudimentary version would be trivial to add, but I assume gogrepo does more than just download. It's a one-time thing only, then it gets stored in a keyring. As for it being a security issue, that's only if you have unauthorized people on your computer. At that point, you have bigger issues to worry about than just your Humble password.

I guarantee you that 98 out of 100 persons will forget about ~/.bash_history, thus leaving your authorization data in plain text saved on your computer for a while.
First thing when gaining access to somebody else's computer, check their shell history. You'd be amazed at all the information you can get alone from that sometimes :p

I don't like the "it's just XY, so who cares about security"-argument. Just makes you slip into bad coding/user habits out of convenience.

You can always grab your cookie from a browser. I remember doing that to get it working. I have to admit I didn't look at it too heavily since I was mainly after a big list of filenames, sizes & hashes (which it can't do) so I could in event of emergency use the internet as a backup.

The argument wasn't "who cares for security", it was that if an attacker has access to your computer, they've already "won", .bash_history passwords or not.

Thank you for both suggestions, unfortunately, neither of them can download all your games automatically, and one even mentions that they don't know how to use the API to get all files (and it also can't get alternates, i.e. windows AND linux versions, or FLAC when there's a FLAC otherwise mp3, etc.).

Also, yeah, sending your password through the commandline seems very insecure, and not just if the person has access to your computer.

I thought the first one was supposed to be able to do that?

But as you said, it can't apparently download all the variants, only the first versions it sees. If I understood the description right.

But good to know that at least some people have started working on such tools also for HB.

difference is that if you store your login data in plain text on your computer, you hand it over to the attacker on a silver platter. Otherwise he has to install himself on your system to survive a reboot and log your keyboard input in the hope you will login again in the near future, ie put a lot more effort into it.
And if we talk about some of the simply scripted mass-exploitation attacks those effort might not even happen.

Then there is also the smart kid who runs the script on a computer terminal at his university without realizing that he now might be in a multi-user environment where other people can see the commandline of all running processes :p

Seem also a complete downloader:
https://github.com/MestreLion/humblebundle