v1.1.3 - CVE Refresh & Notarized Distribution

Changelog

🔐 Security

• Refreshed Electron / Qt / Python / CEF CVE lists (2026-07)
• Raised minSafeElectronMajor to 41
• Fixed compute_min_safe_electron_major for prerelease version ranges and added unit tests

📦 Distribution

• Developer ID signed + notarized — Gatekeeper-ready
• No more xattr -cr workaround required on first launch

🔢 Build

• Version: 1.1.3 (build 3)

v1.1.2 - Security Intelligence & Scan Scope

Changelog

🚀 New Features

• Scan Scope Controls - Recursive scanning, max depth control, excluded folder management
• Security Intelligence - Security rules version tracking, last reviewed date, stale data reminders
• Multi-Framework Detection - Detect and display all frameworks per app (not just primary)
• Report Export - Export as Markdown report with summary, size ranking, and security findings
• Localization - Added Simplified Chinese (zh-Hans) translations

🐛 Bug Fixes

• Electron CVE checks now run across all detected frameworks
• Fixed missing version display (now shows '–' instead of '1.0.0' when unknown)
• Settings scene now properly receives shared view model

⚙️ Improvements

• App Sandbox + proper file access entitlements enabled
• Debug/Release build configurations with separate signing settings
• Improved CSV/JSON export with full framework lists

📦 Build

• Version: 1.1.2 (build 2)

v1.1.1

What's New in v1.1.1

Bug Fix: Complete i18n Localization

v1.1.0 introduced new UI features (security analysis, code signing detail, charts window) but the corresponding localization strings were only translated into Chinese. This patch adds full translations for all remaining 6 languages:

• 🇯🇵 Japanese — セキュリティの問題, コード署名, グラフ, etc.
• 🇰🇷 Korean — 보안 취약점, 코드 서명, 차트, etc.
• 🇩🇪 German — Sicherheitsprobleme, Code-Signierung, Diagramme, etc.
• 🇪🇸 Spanish — Problemas de seguridad, Firma de código, Gráficos, etc.
• 🇮🇹 Italian — Problemi di sicurezza, Firma del codice, Grafici, etc.
• 🇷🇺 Russian — Проблемы безопасности, Подпись кода, Графики, etc.

---

Installation: Download the DMG, drag FrameworkScanner.app to Applications.
If Gatekeeper blocks the app: xattr -cr /Applications/FrameworkScanner.app

Or via Homebrew:

brew tap Geoion/tap
brew install --cask frameworkscanner

v1.1.0

What's New in v1.1.0

New Framework Detection (17 total)

• Python (PyInstaller-packaged apps)
• Go/Wails desktop apps
• React Native macOS apps
• Capacitor hybrid apps

Security Analysis

• Electron apps with known CVEs are flagged with a shield icon in the framework tag
• Color-coded by severity: 🔴 Critical / 🟠 High / 🟡 Medium / 🔵 Low
• Built-in database covers CVE-2020-15215 through CVE-2023-44402

Charts Window

• Click the chart icon (📊) in the stats bar to open a dedicated Charts window
• Includes: framework share donut chart, app count bar chart, disk usage bar chart
• Requires macOS 14+

Expanded Detail Drawer

• Expanding an app row now shows a two-column layout:
  • Left: embedded frameworks list (unchanged)
  • Right: code signing status (authority, Team ID, notarization), key Info.plist fields, and any detected security issues

---

Installation: Download the DMG, drag FrameworkScanner.app to Applications.
If Gatekeeper blocks the app: xattr -cr /Applications/FrameworkScanner.app

Or via Homebrew:

brew tap Geoion/tap
brew install --cask frameworkscanner

v1.0.0

Initial release.