n
neemlama

Neem J. Lama

@neemlama

Shipped Electron App Build and Hardening Audit

Nepal
Engels, Nepalees
Sommige informatie wordt in het Engels weergegeven.
Over mij
Independent reviewer of Electron desktop apps. I audit the build your customers actually download, because most build-time exposure only exists after packaging. I found the Electron hardening fuses left unconfigured in Gitify (5.4k stars); the maintainer credited the analysis and adopted the fix. Every finding carries a confidence grade, secret values are masked, and the report states plainly what I could not check. Static analysis only - nothing is executed.... Lees meer

Skills

n
neemlama
Neem J. Lama
offline • 
Gemiddelde reactietijd: 1 uur

Bekijk mijn diensten

Code review
I will audit your app for leaked API keys and missing hardening
VanafUS$ 75 / projectMeer informatie

Werkervaring

Self-Employed_/ Freelancer

Independent Security Auditor

Self-Employed / Freelancer • Freelance

Feb 2025 - Present • 1 yr 8 mos

Independent security reviewer of Electron desktop applications. I audit shipped builds (.exe, .dmg, .asar), not source repositories. Public audit of Gitify v7.9.0: identified Electron hardening fuses left at framework defaults, 106 source maps shipped in a production build, and 44 development bundles. Reported publicly; maintainer credited the analysis. No runtime testing, no exploitation, secret values masked in every report.