Know what changed inside your app: inspect Electron apps and binaries, trace findings to file and line, compare releases. Locally, without running the target. CLI, MCP server and web UI.
The first look at a binary or app bundle: static, execution-free analysis with evidence. CLI, MCP server and web UI over zero-dependency parsers for ELF, PE, Mach-O, Go, .NET, WebAssembly, EVM, SQLite, plist, APK, Electron apps, source maps and HAR.
npx hexvero analyze ./target
npx hexvero ui --open
npx hexvero setup --apply
Documentation and source: https://github.com/maximilianfeix/hexvero
FAQs
Know what changed inside your Electron release. Electron release diff for security review: compare two builds (app.asar, .app, install directory, release ZIP) and see what changed in IPC, contextBridge, window settings, network hosts and storage, with fil
The npm package hexvero receives a total of 0 weekly downloads. As such, hexvero popularity was classified as not popular.
We found that hexvero demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.
Security News
Cloudflare introduces tsrs, a Rust port of TypeScript’s compiler promising faster checks and lower memory use, with the TypeScript team’s help.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.