Hookwarden

[email protected] scope: hookwarden Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

cli developer-tools go hmac php python

+5 more

static-analysis security signature-verification typescript webhook-security

Affected surfaces

auth rce_ssrf

Summary

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Feature	Low	Adds Go language support with parser, adapters, constant-time rule, SDK recognition, and two fixers. Adds Go language support with parser, adapters, constant-time rule, SDK recognition, and two fixers. Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency
Dependency	Low	Updates @hookwarden/engine to 0.9.0. Updates @hookwarden/engine to 0.9.0. Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Low	Updates @hookwarden/rules to 0.9.0. Updates @hookwarden/rules to 0.9.0. Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Low	Updates @hookwarden/fix to 0.9.0. Updates @hookwarden/fix to 0.9.0. Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

Add Go language support: tree-sitter-go parser, framework adapters and reachability, a constant-time-comparison rule (bytes.Equal → hmac.Equal), library-verified SDK recognition, two Go fixers (constant-time + raw-body misuse), and an FP-measurement corpus held under the <5% gate.

Updated dependencies
- @hookwarden/[email protected]
- @hookwarden/[email protected]
- @hookwarden/[email protected]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Hookwarden

Get notified when new releases ship.

About Hookwarden