n
neemlama

Neem J. Lama

@neemlama

Shipped Electron App Build and Hardening Audit

Nepal
Englisch, Nepali
Einige Informationen werden in englischer Sprache angezeigt.
Über mich
Independent reviewer of Electron desktop apps. I audit the build your customers actually download, because most build-time exposure only exists after packaging. I found the Electron hardening fuses left unconfigured in Gitify (5.4k stars); the maintainer credited the analysis and adopted the fix. Every finding carries a confidence grade, secret values are masked, and the report states plainly what I could not check. Static analysis only - nothing is executed.... Mehr lesen

Kompetenzen

n
neemlama
Neem J. Lama
offline • 
Durchschnittliche Antwortzeit: 1 Stunde

Meine Dienstleistungen

Code-Überprüfung
I will audit your app for leaked API keys and missing hardening
Ab75 $ / ProjektWeitere Details

Arbeitserfahrung

Self-Employed_/ Freelancer

Independent Security Auditor

Self-Employed / Freelancer • Freiberufler

Feb 2025 - Present • 1 yr 8 mos

Independent security reviewer of Electron desktop applications. I audit shipped builds (.exe, .dmg, .asar), not source repositories. Public audit of Gitify v7.9.0: identified Electron hardening fuses left at framework defaults, 106 source maps shipped in a production build, and 44 development bundles. Reported publicly; maintainer credited the analysis. No runtime testing, no exploitation, secret values masked in every report.