Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
An Electron DevTools extension to help you inspect, monitor, and debug your app.
npm install --save-dev devtron
Then execute the following from the Console tab of your running Electron app's developer tools:
require('devtron').install()
You should then see a Devtron
tab added.
If your application's BrowserWindow
was created with nodeIntegration
set
to false
then you will need to expose some globals via a preload
script to allow Devtron access to Electron APIs:
window.__devtron = {require: require, process: process}
Then restart your application and Devtron should successfully load. You may
want to guard this assignment with a if (process.env.NODE_ENV === 'development')
check to ensure these variables aren't exposed in production.
git clone https://github.com/electron/devtron
cd devtron
npm install
npm start
This will start a process that watches and compiles the extension as files are modified.
Then open the Console tab of your Electron app and run the following with the path updated for the location that you've cloned devtron to:
require('/Users/me/code/devtron').install()
Then a Devtron tab should appear and it will now be enabled for that application.
You can reload the extension by closing and reopening the dev tools.
To make developing and debugging the extension easier, you can run it in a Chrome tab that will talk remotely to a running Electron app over HTTP.
Set the DEVTRON_DEBUG_PATH
environment variable to the path of the cloned
devtron repository.
Start your Electron application.
Click the Devtron tab.
You should then see the following messages logged to the Console tab:
Devtron server listening on http://localhost:3948
Open file:///Users/me/devtron/static/index.html to view
Then open /Users/me/devtron/static/index.html
in Chrome
The page there will talk remotely to the running Electron app so you'll be able to fully interact with each pane with real data.
Have an idea for something this extension could do to make debugging Electron apps easier? Please open an issue.
Pull requests are also welcome and appreciated. Run npm test
to run the
existing tests. This project uses the standard JavaScript style.
MIT
FAQs
Electron DevTools Extension
The npm package devtron receives a total of 4,293 weekly downloads. As such, devtron popularity was classified as popular.
We found that devtron demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.