{"repo":"doyensec/electronegativity","free":true,"listed":false,"github":"https://github.com/doyensec/electronegativity","clone":"git clone https://github.com/doyensec/electronegativity.git","description":"Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.","language":"JavaScript","stars":1054,"topics":["security","electron","electron-app","nodejs"],"license":"Apache-2.0","category":"security-tools","readme_excerpt":"Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as described in the \"Electron Security Checklist - A Guide for Developers and Auditors\" whitepaper. Software developers and security auditors can use this tool to detect and mitigate potential weaknesses and implementation bugs when developing applications using Electron. A good understanding of Electron (in)security is still required when using Electronegativity, as some of the potential issues detected by the tool require manual investigation. If you're interested in Electron Security, have a look at our BlackHat 2017 research Electronegativity - A Study of Electron Security and keep an eye on the Doyensec's blog. ElectroNG Improved Version If you need something more powerful or updated, an improved SAST tool based on Electronegativity is available as the result of many years of applied R&D from Doyensec. At the end of 2020, we sat down to create a project roadmap and created a development team to work on what is now ElectroNG. You can read more some of the major improvements over the OSS version in a recent blog post. Installation Major releases are pushed to NPM and can be simply installed using: Usage CLI Option Description :------------: :-----------------------------------------","default_branch":null,"files":null,"tree":[],"storefront":"/r/doyensec","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/doyensec/electronegativity/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}