Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
By Sarah Gooding - Oct 21, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
hexvero
Electron release diff for security review and audit: compare two builds (app.asar, .app, install directory, release ZIP) and see what changed in IPC, contextBridge, window settings, network hosts and storage, with file and line. CI check with SARIF, MCP s
hexvero
Electron release diff for security review. hexvero compares two builds of an Electron app (an
app.asar, a .app, an install directory or a release ZIP) and reports what changed in IPC
channels, contextBridge members, window settings, network hosts and storage, with the file and
line on both sides, plus a release policy check for CI (text, JSON, Markdown, SARIF). It only reads
the files; nothing is executed. The same zero-dependency parsers also read ELF, PE, Mach-O, Go,
.NET, WebAssembly, EVM, SQLite, plist, APK, source maps and HAR. CLI, MCP server and web UI.
npx hexvero demo
npx hexvero compare old/YourApp.app new/YourApp.app --report report.html
npx hexvero init old/YourApp.app
npx hexvero check old/YourApp.app new/YourApp.app --policy .hexvero/policy.json
npx hexvero setup --apply
Documentation and source: https://github.com/maximilianfeix/hexvero
FAQs
Electron release diff for security review and audit: compare two builds (app.asar, .app, install directory, release ZIP) and see what changed in IPC, contextBridge, window settings, network hosts and storage, with file and line. CI check with SARIF, MCP s
The npm package hexvero receives a total of 0 weekly downloads. As such, hexvero popularity was classified as not popular.
We found that hexvero demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 18 Oct 2026
Related posts
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
By Sarah Gooding - Oct 20, 2026
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
By Sarah Gooding - Oct 16, 2026