@chahuadev/junk-sweeper-app 1.0.0 → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -65,6 +65,24 @@ Worker Threads keep the UI responsive while scanning 1,000+ file projects.
|
|
|
65
65
|
|
|
66
66
|
---
|
|
67
67
|
|
|
68
|
+
## 🔒 Security Guarantee
|
|
69
|
+
|
|
70
|
+
Junk Sweeper is **read-only by design** — verified at the code level, not just by policy.
|
|
71
|
+
|
|
72
|
+
| Guarantee | How It Works |
|
|
73
|
+
|---|---|
|
|
74
|
+
| **Never modifies user files** | All detectors use `fs.readFileSync()` only — no `writeFileSync()` anywhere near your code |
|
|
75
|
+
| **Never touches the OS** | No registry writes, no admin privilege requests, no system calls outside the app's own data folder |
|
|
76
|
+
| **Path Traversal Protection** | Every scan path is validated against `../` traversal, symlinks, and forbidden OS directories (`System32`, `/etc`, `/sys`, `/proc`) |
|
|
77
|
+
| **Executable Injection Prevention** | Strict file-type whitelist — `.exe`, `.dll`, `.bat`, `.sh` and all binary formats are blocked before analysis |
|
|
78
|
+
| **App Integrity on Every Launch** | SHA-256 checksums of `main.js`, `preload.js`, and all detectors are verified before the app starts — tampered builds are rejected |
|
|
79
|
+
| **Sandboxed Renderer** | Electron runs with `contextIsolation: true`, `sandbox: true`, `nodeIntegration: false` — the UI has zero direct Node.js access |
|
|
80
|
+
| **Audit Log** | Every file access and security event is logged to `~/.chahuadev/logs/` for full traceability |
|
|
81
|
+
|
|
82
|
+
The only files the app ever writes are its **own** layout cache (`%APPDATA%\Junk Sweeper\layouts\`) and its own security audit log — nothing inside your project.
|
|
83
|
+
|
|
84
|
+
---
|
|
85
|
+
|
|
68
86
|
## 📦 Platform Support
|
|
69
87
|
|
|
70
88
|
| Platform | Architecture | Status |
|
package/package.json
CHANGED