electron
Build cross platform desktop apps with JavaScript, HTML, and CSS
100
Versions
MIT
License
Yes
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
electronhqelectron-nightly
Keywords
electron
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): @types/node is a TypeScript type declaration package legitimately listed as a dependency for type support; not a security concern. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Electron's postinstall runs node install.js to download the prebuilt Electron binary via @electron/get — this is the documented, stable install flow for every Electron release. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process is used in cli.js solely to spawn the Electron binary with user-supplied args — the core purpose of the CLI wrapper. | ai | |
| semgrep | semgrep:child-process-spawn | AI (semgrep): proc.spawn in cli.js launches the downloaded Electron binary; this is the intended behavior of the electron CLI entry point. | ai |
Versions (showing 100 of 771)
| Version | Deps | Published |
|---|---|---|
| 22.3.9 | 3 / 0 | |
| 22.3.8 | 3 / 0 | |
| 22.3.7 | 3 / 0 | |
| 22.3.6 | 3 / 0 | |
| 22.3.5 | 3 / 0 | |
| 22.3.4 | 3 / 0 | |
| 22.3.3 | 3 / 0 | |
| 22.3.2 | 3 / 0 | |
| 22.3.1 | 3 / 0 | |
| 22.3.0 | 3 / 0 | |
| 22.2.1 | 3 / 0 | |
| 22.2.0 | 3 / 0 | |
| 22.1.0 | 3 / 0 | |
| 22.0.3 | 3 / 0 | |
| 22.0.2 | 3 / 0 | |
| 22.0.1 | 3 / 0 | |
| 22.0.0 | 3 / 0 | |
| 21.4.4 | 3 / 0 | |
| 21.4.3 | 3 / 0 | |
| 21.4.2 | 3 / 0 | |
| 21.4.1 | 3 / 0 | |
| 21.4.0 | 3 / 0 | |
| 21.3.5 | 3 / 0 | |
| 21.3.4 | 3 / 0 | |
| 21.3.3 | 3 / 0 | |
| 21.3.1 | 3 / 0 | |
| 21.3.0 | 3 / 0 | |
| 21.2.3 | 3 / 0 | |
| 21.2.2 | 3 / 0 | |
| 21.2.1 | 3 / 0 | |
| 21.2.0 | 3 / 0 | |
| 21.1.1 | 3 / 0 | |
| 21.1.0 | 3 / 0 | |
| 21.0.1 | 3 / 0 | |
| 21.0.0 | 3 / 0 | |
| 20.3.12 | 3 / 0 | |
| 20.3.11 | 3 / 0 | |
| 20.3.10 | 3 / 0 | |
| 20.3.9 | 3 / 0 | |
| 20.3.8 | 3 / 0 | |
| 20.3.7 | 3 / 0 | |
| 20.3.6 | 3 / 0 | |
| 20.3.5 | 3 / 0 | |
| 20.3.4 | 3 / 0 | |
| 20.3.3 | 3 / 0 | |
| 20.3.2 | 3 / 0 | |
| 20.3.1 | 3 / 0 | |
| 20.3.0 | 3 / 0 | |
| 20.2.0 | 3 / 0 | |
| 20.1.4 | 3 / 0 | |
| 20.1.3 | 3 / 0 | |
| 20.1.2 | 3 / 0 | |
| 20.1.1 | 3 / 0 | |
| 20.1.0 | 3 / 0 | |
| 20.0.3 | 3 / 0 | |
| 20.0.2 | 3 / 0 | |
| 20.0.1 | 3 / 0 | |
| 20.0.0 | 3 / 0 | |
| 19.1.9 | 3 / 0 | |
| 19.1.8 | 3 / 0 | |
| 19.1.7 | 3 / 0 | |
| 19.1.6 | 3 / 0 | |
| 19.1.5 | 3 / 0 | |
| 19.1.4 | 3 / 0 | |
| 19.1.3 | 3 / 0 | |
| 19.1.2 | 3 / 0 | |
| 19.1.1 | 3 / 0 | |
| 19.1.0 | 3 / 0 | |
| 19.0.17 | 3 / 0 | |
| 19.0.16 | 3 / 0 | |
| 19.0.15 | 3 / 0 | |
| 19.0.14 | 3 / 0 | |
| 19.0.13 | 3 / 0 | |
| 19.0.12 | 3 / 0 | |
| 19.0.11 | 3 / 0 | |
| 19.0.10 | 3 / 0 | |
| 19.0.9 | 3 / 0 | |
| 19.0.8 | 3 / 0 | |
| 19.0.7 | 3 / 0 | |
| 19.0.6 | 3 / 0 | |
| 19.0.5 | 3 / 0 | |
| 19.0.4 | 3 / 0 | |
| 19.0.3 | 3 / 0 | |
| 19.0.2 | 3 / 0 | |
| 19.0.1 | 3 / 0 | |
| 19.0.0 | 3 / 0 | |
| 18.3.15 | 3 / 0 | |
| 18.3.14 | 3 / 0 | |
| 18.3.13 | 3 / 0 | |
| 18.3.12 | 3 / 0 | |
| 18.3.11 | 3 / 0 | |
| 18.3.9 | 3 / 0 | |
| 18.3.8 | 3 / 0 | |
| 18.3.7 | 3 / 0 | |
| 18.3.6 | 3 / 0 | |
| 18.3.5 | 3 / 0 | |
| 18.3.4 | 3 / 0 | |
| 18.3.3 | 3 / 0 | |
| 18.3.2 | 3 / 0 | |
| 18.3.1 | 3 / 0 |
Showing 100 of 771
Next page →