Gallery · App X-Ray

Hyper 4.0.0-canary.5

Electron 22.3.25 · 4 addresses · 194 modules · 8 IPC channels

1 high
0 medium
1 low
1 info

Findings

high

Electron 22.3.25 no longer receives security fixes

21 major versions behind the oldest supported line (as of 2026-10-22, Electron 43–45 are supported). Its bundled Chromium misses every fix since.

low

IPC handlers do not check the sender

9 main-process handlers, and no check of event.senderFrame or event.sender was found. Any page that can send IPC, including an injected one, is trusted.

info

IPC channel names chosen at runtime

1 IPC call take the channel name from a variable. When a preload script forwards a channel chosen by the page, the page can reach every handler; worth reviewing.

Network addresses

Host	Address	How	Where
—	hyper.plugin-versions	call:cache.get	app/plugins.ts:133
—	hyper.plugins	call:cache.get	app/plugins.ts:191
—	windowPosition	call:cfg.get	app/config/windows.ts:14
—	windowSize	call:cfg.get	app/config/windows.ts:15

Modules

Module	Used by
../../config	app/menus/menus/help.ts
../../typings/constants	lib/actions/index.ts
../../typings/constants/config	lib/actions/config.ts, lib/reducers/ui.ts
../../typings/constants/notifications	lib/actions/notifications.ts, lib/reducers/ui.ts
../../typings/constants/sessions	lib/actions/sessions.ts, lib/actions/term-groups.ts, lib/reducers/sessions.ts, lib/reducers/term-groups.ts, lib/reducers/ui.ts
../../typings/constants/tabs	lib/actions/header.ts
../../typings/constants/term-groups	lib/actions/term-groups.ts, lib/reducers/term-groups.ts
../../typings/constants/ui	lib/actions/header.ts, lib/actions/ui.ts, lib/reducers/ui.ts
../../typings/constants/updater	lib/actions/updater.ts, lib/reducers/ui.ts
../actions/header	lib/containers/header.ts
../actions/notifications	lib/containers/notifications.ts
../actions/sessions	lib/containers/terms.ts
../actions/term-groups	lib/components/term-group.tsx, lib/containers/header.ts
../actions/ui	lib/containers/hyper.tsx, lib/containers/terms.ts
../actions/updater	lib/containers/notifications.ts
../command-registry	lib/components/terms.tsx, lib/containers/hyper.tsx
../commands	app/menus/menu.ts, app/ui/contextmenu.ts, app/ui/window.ts
../components/header	lib/containers/header.ts
../components/notification	lib/utils/plugins.ts
../components/notifications	lib/containers/notifications.ts
../components/terms	lib/containers/terms.ts
../config	app/menus/menu.ts, app/ui/contextmenu.ts, app/ui/window.ts
../config/paths	app/menus/menu.ts, app/plugins/install.ts, app/ui/window.ts, app/utils/cli-install.ts
../menus/menus/edit	app/ui/contextmenu.ts
../menus/menus/shell	app/ui/contextmenu.ts
../notifications	app/ui/window.ts
../notify	app/config/import.ts, app/config/init.ts, app/config/migrate.ts, app/ui/window.ts, app/utils/cli-install.ts
../plugins	app/menus/menu.ts, app/ui/contextmenu.ts, app/ui/window.ts
../reducers/index	lib/store/configure-store.dev.ts, lib/store/configure-store.prod.ts
../rpc	app/ui/window.ts, lib/actions/header.ts, lib/actions/index.ts, lib/actions/sessions.ts, lib/actions/term-groups.ts, lib/actions/ui.ts, lib/actions/updater.ts
../selectors	lib/actions/term-groups.ts, lib/actions/ui.ts, lib/containers/header.ts, lib/containers/terms.ts
../session	app/ui/window.ts
../terms	lib/components/term.tsx, lib/store/write-middleware.ts
../updater	app/ui/window.ts
../utils/effects	lib/store/configure-store.dev.ts, lib/store/configure-store.prod.ts
../utils/file	lib/actions/ui.ts
../utils/map-keys	app/config/init.ts
../utils/notify	lib/actions/ui.ts
../utils/object	lib/actions/sessions.ts, lib/components/terms.tsx
../utils/paste	lib/components/term.tsx
../utils/plugins	lib/components/header.tsx, lib/components/notifications.tsx, lib/components/tabs.tsx, lib/components/term-group.tsx, lib/components/term.tsx, lib/components/terms.tsx, lib/containers/header.ts, lib/containers/hyper.tsx, lib/containers/notifications.ts, lib/containers/terms.ts, lib/reducers/sessions.ts, lib/reducers/term-groups.ts, lib/reducers/ui.ts, lib/store/configure-store.dev.ts, lib/store/configure-store.prod.ts
../utils/renderer-utils	app/menus/menu.ts, app/ui/window.ts
../utils/term-groups	lib/actions/sessions.ts, lib/actions/term-groups.ts, lib/actions/ui.ts, lib/reducers/term-groups.ts
../utils/to-electron-background-color	app/ui/window.ts
./actions/config	lib/index.tsx
./actions/index	lib/index.tsx
./actions/notifications	lib/index.tsx
./actions/sessions	lib/command-registry.ts, lib/index.tsx
./actions/term-groups	lib/index.tsx
./actions/ui	lib/index.tsx
./actions/updater	lib/index.tsx
./api	cli/index.ts
./auto-updater-linux	app/updater.ts
./config	app/commands.ts, app/index.ts, app/plugins.ts, app/session.ts, app/updater.ts
./config/import	app/config.ts
./config/open	app/config.ts
./config/paths	app/config.ts, app/index.ts, app/notify.ts, app/plugins.ts, app/session.ts
./config/windows	app/config.ts
./configure-store.dev	lib/store/configure-store.ts
./configure-store.prod	lib/store/configure-store.ts
./containers/hyper	lib/index.tsx
./contextmenu	app/ui/window.ts
./header	lib/containers/hyper.tsx
./init	app/config/import.ts, app/config/migrate.ts
./ipc	lib/utils/config.ts, lib/utils/ipc-child-process.ts, lib/utils/rpc.ts
./ipc-child-process	lib/utils/plugins.ts
./menus/darwin	app/menus/menu.ts
./menus/edit	app/menus/menu.ts
./menus/help	app/menus/menu.ts
./menus/menu	app/index.ts
./menus/shell	app/menus/menu.ts
./menus/tools	app/menus/menu.ts
./menus/view	app/menus/menu.ts
./menus/window	app/menus/menu.ts
./migrate	app/config/import.ts
./new-tab	lib/components/tabs.tsx
./notification	lib/components/notifications.tsx
./notifications	lib/containers/hyper.tsx
./notify	app/config.ts, app/plugins.ts, lib/utils/plugins.ts
./object	lib/utils/plugins.ts
./paths	app/config/import.ts, app/config/migrate.ts, app/config/open.ts
./plugins	app/commands.ts, app/index.ts, app/session.ts, app/updater.ts
./plugins/extensions	app/plugins.ts
./plugins/install	app/plugins.ts
./rpc	lib/index.tsx
./searchBox	lib/components/term.tsx
./sessions	lib/actions/term-groups.ts, lib/actions/ui.ts, lib/reducers/index.ts
./split-pane	lib/components/term-group.tsx
./store/configure-store	lib/index.tsx
./style-sheet	lib/components/terms.tsx
./tab	lib/components/tabs.tsx
./tabs	lib/components/header.tsx
./term	lib/components/term-group.tsx
./term-group	lib/components/terms.tsx
./term-groups	lib/actions/header.ts, lib/actions/ui.ts, lib/reducers/index.ts
./terms	lib/containers/hyper.tsx
./ui	lib/reducers/index.ts
./ui/window	app/index.ts
./utils/cli-install	app/commands.ts, app/index.ts
./utils/colors	app/config.ts
./utils/config	lib/index.tsx
./utils/file	lib/index.tsx
./utils/ipc	lib/command-registry.ts
./utils/map-keys	app/plugins.ts
./utils/plugins	lib/index.tsx
./utils/rpc	lib/rpc.ts
./utils/shell-fallback	app/session.ts
./utils/system-context-menu	app/commands.ts
./utils/window-utils	app/index.ts
./v8-snapshot-util	lib/index.tsx
./write-middleware	lib/store/configure-store.dev.ts, lib/store/configure-store.prod.ts
@electron/remote	lib/utils/config.ts, lib/utils/plugins.ts
@electron/remote/main	app/index.ts, app/ui/window.ts
@react-icons/all-files/vsc/VscArrowDown	lib/components/searchBox.tsx
@react-icons/all-files/vsc/VscArrowUp	lib/components/searchBox.tsx
@react-icons/all-files/vsc/VscCaseSensitive	lib/components/searchBox.tsx
@react-icons/all-files/vsc/VscChevronDown	lib/components/new-tab.tsx
@react-icons/all-files/vsc/VscClose	lib/components/searchBox.tsx
@react-icons/all-files/vsc/VscRegex	lib/components/searchBox.tsx
@react-icons/all-files/vsc/VscWholeWord	lib/components/searchBox.tsx
@redux-devtools/extension	lib/store/configure-store.dev.ts
args	cli/index.ts
ast-types	app/config/migrate.ts
async-retry	app/updater.ts
chalk	cli/index.ts
child_process	app/config/open.ts, app/plugins.ts, app/plugins/install.ts, cli/index.ts, lib/utils/plugins.ts
chokidar	app/config.ts
clsx	lib/components/searchBox.tsx
color	app/utils/to-electron-background-color.ts, lib/components/term.tsx
columnify	cli/index.ts
copy-webpack-plugin	webpack.config.ts
default-shell	app/session.ts
electron	app/commands.ts, app/config.ts, app/config/open.ts, app/config/paths.ts, app/index.ts, app/menus/menu.ts, app/menus/menus/darwin.ts, app/menus/menus/help.ts, app/notify.ts, app/plugins.ts, app/rpc.ts, app/ui/window.ts, app/updater.ts, app/utils/cli-install.ts, app/utils/window-utils.ts, lib/components/term.tsx, lib/index.tsx, lib/utils/ipc.ts, lib/utils/paste.ts
electron-devtools-installer	app/index.ts
electron-fetch	app/auto-updater-linux.ts, app/notifications.ts
electron-is-dev	app/config/paths.ts, app/index.ts, app/ui/window.ts
electron-store	app/config/windows.ts, app/plugins.ts
events	app/auto-updater-linux.ts, app/rpc.ts, app/session.ts, lib/utils/rpc.ts
fs	app/config/paths.ts, app/plugins.ts, app/ui/window.ts, app/utils/cli-install.ts, cli/api.ts, cli/index.ts, lib/actions/ui.ts, lib/utils/file.ts
fs-extra	app/config/import.ts, app/config/migrate.ts, app/utils/cli-install.ts
git-describe	app/index.ts
got	cli/api.ts, cli/index.ts
inquirer	release.js
lodash/isEqual	lib/components/term.tsx
lodash/merge	app/config/init.ts, app/config/migrate.ts
lodash/pickBy	lib/components/term.tsx
lodash/sum	lib/components/split-pane.tsx
module	app/plugins.ts, lib/utils/plugins.ts
mousetrap	lib/containers/hyper.tsx
ms	app/notifications.ts, app/plugins.ts, app/plugins/install.ts, app/updater.ts
native-process-working-directory	app/ui/window.ts
native-reg	app/config/open.ts, app/utils/cli-install.ts, app/utils/system-context-menu.ts
node-pty	app/session.ts
open	cli/index.ts
ora	cli/index.ts
os	app/config/paths.ts, app/menus/menus/help.ts, cli/api.ts, lib/reducers/ui.ts
os-locale	app/session.ts
parse-url	app/index.ts
path	app/config/migrate.ts, app/config/paths.ts, app/index.ts, app/plugins.ts, app/session.ts, app/ui/window.ts, app/utils/cli-install.ts, cli/api.ts, cli/index.ts, lib/utils/plugins.ts, webpack.config.ts
php-escape-shell	lib/actions/ui.ts
plist	lib/utils/paste.ts
queue	app/plugins/install.ts
react	app/plugins.ts, lib/components/header.tsx, lib/components/new-tab.tsx, lib/components/notification.tsx, lib/components/notifications.tsx, lib/components/searchBox.tsx, lib/components/split-pane.tsx, lib/components/style-sheet.tsx, lib/components/tab.tsx, lib/components/tabs.tsx, lib/components/term-group.tsx, lib/components/term.tsx, lib/components/terms.tsx, lib/containers/hyper.tsx, lib/index.tsx, lib/utils/plugins.ts
react-dom	app/plugins.ts, lib/utils/plugins.ts
react-dom/client	lib/index.tsx
react-redux	lib/components/term-group.tsx, lib/index.tsx, lib/utils/plugins.ts
react-use/lib/useClickAway	lib/components/new-tab.tsx
recast	app/config/migrate.ts
recast/parsers/babel	app/config/migrate.ts
redux	lib/reducers/index.ts, lib/store/configure-store.dev.ts, lib/store/configure-store.prod.ts
redux-thunk	lib/store/configure-store.dev.ts, lib/store/configure-store.prod.ts
registry-url	cli/api.ts
reselect	lib/containers/header.ts, lib/selectors.ts
seamless-immutable	lib/reducers/sessions.ts, lib/reducers/term-groups.ts, lib/reducers/ui.ts
shell-env	app/session.ts
string_decoder	app/session.ts
stylis	lib/containers/hyper.tsx
sudo-prompt	app/utils/cli-install.ts
terser-webpack-plugin	webpack.config.ts
url	app/ui/window.ts
util	app/plugins.ts, app/utils/cli-install.ts, cli/index.ts
uuid	app/rpc.ts, app/ui/window.ts, lib/reducers/term-groups.ts
vm	app/config/init.ts
webpack	webpack.config.ts
xterm	lib/components/term.tsx
xterm-addon-canvas	lib/components/term.tsx
xterm-addon-fit	lib/components/term.tsx
xterm-addon-image	lib/components/term.tsx
xterm-addon-ligatures	lib/components/term.tsx
xterm-addon-search	lib/components/term.tsx
xterm-addon-unicode11	lib/components/term.tsx
xterm-addon-web-links	lib/components/term.tsx
xterm-addon-webgl	lib/components/term.tsx
xterm/css/xterm.css	lib/components/term.tsx

Windows and IPC

Window	webPreferences
app/ui/window.ts:57	defaults

Channel	Side	Operation	Where
child_process.exec	main	handle	app/plugins.ts:467
child_process.execFile	main	handle	app/plugins.ts:471
getBasePaths	main	handle	app/plugins.ts:477
getDecoratedConfig	main	handle	app/plugins.ts:479
getDecoratedKeymaps	main	handle	app/plugins.ts:480
getDeprecatedConfig	main	handle	app/plugins.ts:478
getLoadedPluginVersions	main	handle	app/plugins.ts:475
getPaths	main	handle	app/plugins.ts:476

Remote pages, data and packaging

No remote pages are loaded into app windows.

No on-device storage calls found.

No packaged executable was found, so Electron fuses were not read.

README badge

Maintainers can show this report in their README:

[![App X-Ray](https://Eliot5566.github.io/app-xray/apps/hyper/badge.svg)](https://Eliot5566.github.io/app-xray/apps/hyper/)

What this report cannot see

Source checkout: 54 test, story, build-tool and minified/generated files were left out. Rerun with --all-files to include them.
CommonJS and ESM binding relationships were recovered from inert syntax and resolved only within the inventoried artifact container.
Dynamic IPC channel expressions remain unresolved and are never paired by textual similarity.
Electron API identity follows proven lexical module aliases and structurally verified module-namespace interop. Other reassignments, dynamic selections, and visibly overwritten namespace members are unresolved; missing findings do not establish absence. Arbitrary call side effects and runtime registration are not evaluated.
Electron relationships are derived from inert syntax; runtime registration, reachability, defaults, and enforcement remain unproven.
Graph coverage is incomplete; unavailable facts remain explicit and must not be read as absence.
JavaScript and HTML were parsed as inert text; bundle bootstrap code was never executed.
Static imports, entrypoints, workers, endpoints, and storage relationships do not prove runtime execution.
Static paths and relationships may remain unresolved when expressions are dynamic or obfuscated.
Webpack/Rspack factories were recovered from AST literals; REA did not invoke push handlers or bundle bootstrap code.
app/index.html has 2 inline JavaScript bodies starting at lines 34, 36 that were not analyzed; endpoints, storage, imports and other facts in them are absent from the evidence.