Audit with Proof

JavaScript · TypeScript · Node.js · Electron · npm supply chain · SBOM · static analysis (AST) · native binary review (Ghidra) · Python · Bash

Making audit claims verifiable by someone who doesn't trust me: provenance, attestations, and reproducible evidence pipelines.

A zero-cost pipeline that turns one open-source app into a published audit — and into a 1080×1920 short on YouTube and Bluesky.

Audits of Electron/JS desktop apps — dependency + risk report, 48 h, with a recomputable evidence bundle.