Hookwarden

v@hookwarden/[email protected] Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

cli developer-tools go hmac php python

+5 more

static-analysis security signature-verification typescript webhook-security

Affected surfaces

auth deps

Summary

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Feature	Low	Adds Go language support with parser, adapters, and reachability. Adds Go language support with parser, adapters, and reachability. Source: llm_adapter@2026-06-04 Confidence: low	—
Feature	Low	Adds Go language support with parser, adapters, reachability, constant-time comparison rule, SDK recognition, two fixers, and FP-measurement corpus. Adds Go language support with parser, adapters, reachability, constant-time comparison rule, SDK recognition, two fixers, and FP-measurement corpus. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Dependency	Low	Updates @hookwarden/engine dependency to 0.9.0. Updates @hookwarden/engine dependency to 0.9.0. Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Low	Updates @hookwarden/fix dependency to 0.9.0. Updates @hookwarden/fix dependency to 0.9.0. Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

Add Go language support: tree-sitter-go parser, framework adapters and reachability, a constant-time-comparison rule (bytes.Equal → hmac.Equal), library-verified SDK recognition, two Go fixers (constant-time + raw-body misuse), and an FP-measurement corpus held under the <5% gate.

Updated dependencies
- @hookwarden/[email protected]
- @hookwarden/[email protected]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Hookwarden

Get notified when new releases ship.

About Hookwarden