Hookwarden

v@hookwarden/[email protected] Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

cli developer-tools go hmac php python

+5 more

static-analysis security signature-verification typescript webhook-security

Affected surfaces

auth deps

Summary

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Feature	Low	Adds Go language support with parser, adapters, constant-time rule, SDK recognition, and fixers. Adds Go language support with parser, adapters, constant-time rule, SDK recognition, and fixers. Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Low	Updates @hookwarden/engine dependency to version 0.9.0. Updates @hookwarden/engine dependency to version 0.9.0. Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

Add Go language support: tree-sitter-go parser, framework adapters and reachability, a constant-time-comparison rule (bytes.Equal → hmac.Equal), library-verified SDK recognition, two Go fixers (constant-time + raw-body misuse), and an FP-measurement corpus held under the <5% gate.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Hookwarden

Get notified when new releases ship.

About Hookwarden