Choose a local folder, ZIP, macOS app or Xcode archive. Repository folders work without connecting to a hosting service. ZIP files are read without extraction; unsafe, encrypted, corrupt or oversized entries stop inspection and appear as coverage findings.
Scans are limited to 20,000 entries, 2 MB per file, 200 MB total, and 10,000 findings. Generated dependency/build directories and symlinks are excluded. Binary code and runtime behavior are not audited. The score is a summary of implemented rule findings, not a security guarantee.
Optional OSV lookup checks supported exact npm, PyPI, crates.io and RubyGems package versions. Version ranges and Swift advisories need separate review. An unavailable lookup does not discard local results. You can export English HTML/JSON reports; ignores apply only to the current scan.
For support, include your macOS version, app version, and steps to reproduce. Use synthetic examples. Never attach actual credentials, private source code or confidential data.
yutchi.apps@gmail.com