Both tsdown passes receive the complete workspace and bundle only JavaScript emitted to lib/types by the corresponding tsc phase. The root config does not scan Client artifacts, classify package names ...

Interchangeable encrypted reasoning blocks let attackers decode hidden chain-of-thought and leak PII and credentials from major LLM APIs.

Inspect a local Electron/JavaScript directory or ASAR without executing its code. analyze_javascript_application and the CLI routes below return an Evidence record with the application graph, static ...