guydalf

Affects .Net Core 2.1, 3.0, 3.1 -not app specific but workaround exists as mentioned and is tracked here https://github.com/microsoft/ApplicationInspector/issues/123

Mac Catalina restrictions appear to be the issue which where app launch checks were relaxed for a bit then made more aggressive very recently. We added an issue on the app project site to look into whether the app or just .net core or both need a macOS notice fix but there's a work around discussed here https://www.cultofmac.com/672576/cant-launch-your-apps-on-ma...

we like -keep the ideas coming!

smile

Correct. We don't need to parse it per se just look for use of features that are easy to identify like XmlHttpRequest, Json.Parse use etc.

Over 93% of new software applications today use open source from public repositories of source code or other third party code and average over 100 components code that they didn't directly write. Often they have only a partial understanding of what is in them due to time constraints to release their products. That's a big attack surface and knowing what is in the code that developers choose to build their products with is becoming urgent. This tool scans code and reports the types of features found in it to help developers decide whether it does more than they expected from a features standpoint. See the project site and wiki for more https://github.com/Microsoft/ApplicationInspector

Just wanted to introduce myself as the lead developer on the tool. Valid comments and questions have been dropped here and I've responded to a couple of them already by posting clarifications below and on the project wiki. Yes we are thinking of using the tool for repos like NuGet and maybe Github as a service that automatically identifies detected features for each component. Stay tuned and keep the ideas coming. Happy to answer any further questions.

Good point. At a minimum it should clearly state that while the tool didn't "find" such a feature it should not be taken as a security reliable result. See https://github.com/microsoft/ApplicationInspector/wiki/6.-Un...

See https://github.com/microsoft/ApplicationInspector/wiki/6.-Un... that answers questions on choice of icons and https://github.com/microsoft/ApplicationInspector/wiki/2.1-F... that talks about language support.