tinyjs - Desktop apps. in ~6 MB
A JavaScript backend with full system access, a native webview window (WebKit on macOS, WebView2 on Windows, WebKitGTK on Linux), and nothing else. No Electron. No bundled Chromium. No HTTP server. No ports.
Cloudflare's security audit skill organizes repository reviews into reconnaissance, coverage-led hunting, adversarial validation, structured findings, independent verification, and final reporting.