electronegativity

Identifies misconfigurations like disabled context isolation and weak CSPs by leveraging AST and DOM parsing, as outlined in the Electron Security Checklist.

Can be automated via GitHub Actions to provide continuous security feedback in development pipelines, demonstrated in the README with code scanning alerts.

Allows fine-tuning with CLI flags and inline `eng-disable` comments to include or exclude specific checks, offering flexibility for targeted audits.

Checks for breaking changes and vulnerabilities when upgrading Electron versions, aiding in secure migrations with the `-u` flag for version comparisons.