Image: eliot5566.github.io
App X-Ray: an "ingredients label" for Electron apps
A shareable report that lists what an Electron app is made of and what it does, built on top of REA's analysis.
Credits
Earliest dated source:
The full story
App X-Ray produces a one-page "ingredients label" for Electron desktop apps. It shows which Electron version an app ships and whether that version still gets security fixes, its window security settings, the internal message channels it handles, its preload scripts and the web addresses written into its code. Every claim links to the exact file and line.
It is built on REA's JavaScript analysis plus about ten rules. It scans 20 open-source apps, including Signal Desktop, Bitwarden, Joplin and GitHub Desktop, and publishes the results in a weekly gallery. Most apps scan in under a minute.
How it was done
Tools
Themes
Loading themes…
Sources
From the maker's own write-up or code. We summarise what they report; we haven't tested it ourselves.
- REA community: Showcase: App X-Ray — a shareable "ingredients label" for Electron apps, built on REARepository account: morlutoPublished
The showcase post: what App X-Ray checks, how it uses REA, and a link to the weekly gallery.
- The project: eliot5566.github.io
Linked in the post.