hackjutsu/Lepton

Lepton is a desktop application built on Electron and React that allows users to browse, search, and edit GitHub Gists. It provides a rich interface for managing code snippets with features like syntax highlighting, tag-based organization, and immersive viewing modes. The system handles user authentication via GitHub OAuth and supports extensive customization through themes, language settings, and local preferences.

27 changes.

The project underwent a comprehensive rewrite from a legacy Node.js script into a modern Electron application powered by React, Redux, and Webpack. This period focused on establishing a secure, sandboxed architecture with centralized state management, while introducing a rich feature set including global search, immersive editing, and extensive UI customization.

27 changes.

This period focused on expanding the application's feature set with internationalization, syntax highlighting, and dashboard visualizations, while simultaneously migrating the codebase to React 19. Significant work was also dedicated to hardening security through context isolation and secure logging, alongside comprehensive test coverage for core utilities and UI components.

The About page has been enhanced to include a comprehensive, editable preferences panel. Users can now adjust settings directly from this modal, covering categories such as Appearance (theme, language), Behavior (auto-update, tray options), Profile (avatar type), Snippets and Tags, Editor, Notifications, Network, GitHub Enterprise, Advanced options, and Keyboard Shortcuts. Changes are saved via the electron bridge, with immediate application for some settings like theme and notices for others that require a restart.

app/containers/aboutPage · high confidence

The application now includes the default PrismJS 1.15.0 theme styles for syntax-highlighted code blocks. This adds visual styling for code elements (such as tokens for keywords, strings, and comments) using the default color palette, ensuring that code snippets rendered in markdown or other sections display with proper syntax highlighting.

app/utilities/vendor/prism · high confidence

The application now includes a set of pre-configured built-in themes, allowing users to switch between various visual styles without custom configuration. This update introduces support for popular color schemes including One Dark, Atom One Dark, GitHub Light/Dark, Catppuccin Latte/Mocha, Solarized Light/Dark, Dracula, Material Theme, and Ayu, alongside the existing light and dark defaults.

app/utilities/themeManager · high confidence

A new zoom utility module has been introduced to manage application zoom levels. It provides functions to parse and normalize zoom percentages, converting them into the specific zoom levels required by the underlying Electron environment, and includes a default fallback of 100% for invalid inputs.

app/utilities/zoom · high confidence

The dashboard now displays a radar chart visualizing the distribution of programming languages in your gists when sufficient data is available. This new feature, implemented in the dashboard container, uses Chart.js to render a radar visualization of the top five languages, replacing the previous static greeting message for users with more than two language tags. The chart includes specific styling for point labels and hides tick labels for a cleaner look, while still showing a compliment based on the most frequent language.

app/containers/dashboard · high confidence

Users can now search for text within the current page using the Ctrl/Cmd+F keyboard shortcut, which opens a floating search bar. The feature highlights all matching instances and the active match, supports navigation between results via Enter/Shift+Enter, and automatically scrolls the active match into view. The search excludes hidden content, scripts, and form elements to avoid false positives.

app/containers/findInPage, app/utilities/pageFind · high confidence

The application now supports multiple languages, including English, Spanish, French, Japanese, Korean, Turkish, and Simplified/Traditional Chinese. Users can switch between these languages to view the interface in their preferred language, with English serving as the default fallback.

app/utilities/i18n · high confidence

The application now supports eight languages: English, Spanish, French, Japanese, Korean, Turkish, Simplified Chinese, and Traditional Chinese. This change introduces the locale files in app/utilities/i18n/locales, providing translated text for the user interface, including menus, dialogs, editor prompts, and notifications, allowing users to switch their preferred language within the app.

app/utilities/i18n/locales · high confidence

A new utility at app/utilities/asciidoc/index.js now renders AsciiDoc content into HTML using @asciidoctor/core with syntax highlighting via highlight.js. The rendered output is sanitized to remove potentially unsafe HTML tags (such as script, iframe, and object) and attributes (including event handlers and unsafe URLs), ensuring that only safe protocols (http, https, mailto) are allowed in links and sources.

app/utilities/asciidoc · high confidence

The application now includes the Bootstrap v3.3.7 theme CSS files (\bootstrap-theme.css\, \bootstrap-theme.min.css\, and the source map). This adds the default visual styling for UI components such as buttons, alerts, progress bars, and panels, providing the gradient backgrounds and shadows characteristic of the Bootstrap theme.

app/utilities/vendor/bootstrap · high confidence

A new Webpack loader has been introduced to handle Solidity module compatibility. This loader modifies source code by replacing a browser-specific CommonJS module shim with a comment noting that Webpack provides the module object, ensuring correct module handling during the build process.

configs/loaders · high confidence

The application now includes a wider selection of built-in syntax highlighting themes for code blocks. This update adds CSS style sheets for popular themes such as Agate, Android Studio, Arduino Light, Atlassian, Atom One (Dark/Light), Ayu Dark, Brown Paper, CodePen Embed, Color Brewer, Darcula, Dark, Docco, Dracula, FAR, Foundation, GitHub (Dark/Gist/Normal), Google Code, and many others, allowing users to choose from a broader range of visual styles for code display.

app/utilities/vendor/highlightJS · high confidence

A new utility module has been introduced to manage the application's start-at-login setting. This component normalizes input values and applies the setting using the native \app.setLoginItemSettings\ API on supported platforms (macOS and Windows), while providing appropriate logging and fallback behavior for unsupported environments or missing APIs.

app/utilities/startAtLogin · high confidence

A new utility module has been added to apply proxy settings to the Electron session. It reads proxy enablement and address from the configuration, normalizes proxy rules (including converting 'socks://' to 'socks5://'), and supports both PAC script and fixed server modes. The module applies these settings to the default session and logs success or failure.

app/utilities/electronProxy · high confidence

The gist editor container has been refactored to use a dedicated CodeMirror class that integrates with the application's theme manager, allowing users to select from built-in themes including GitHub and GitHub Dark styles. This change also enables a wide range of CodeMirror addons for improved editing capabilities, such as bracket/tag matching, code folding, search and highlighting, and support for dozens of programming language syntax modes.

app/containers/gistEditor · high confidence

The navigation panel now organizes language and custom tags into collapsible sections, allowing users to expand or collapse categories to manage screen space. It adds a dedicated 'Pinned' section where users can pin specific tags for quick access, configurable via a new modal triggered by a plus icon. The panel also caches the active section state in local preferences to persist user layout choices across sessions, and separates language tags (prefixed with 'lang@') from custom tags for clearer organization.

app/containers/navigationPanel · high confidence

The application now uses a new SnippetPanel component (app/containers/snippetPanel) that renders code snippets via a dedicated container and stylesheet. This change introduces an 'immersive mode' which adjusts font styling and layout for the snippet content. Additionally, when no snippets are active or available, the panel displays a 'dinosaur' ASCII art welcome screen instead of a blank or error state. The panel's CSS handles vertical scrolling and ensures the content area adapts to the viewport height.

app/containers/snippetPanel · high confidence

A new TagBadges container component has been added to render tag lists with support for both colored and plain visual styles. The component accepts a 'colored' prop to toggle between vibrant, hash-based color coding (using six distinct background colors) and a subtle, italicized plain style. It handles tag deduplication and label formatting, automatically prefixing plain tags with a '\#' symbol, and integrates with existing configuration to determine visibility and coloring behavior for snippet lists.

app/containers/tagBadges · high confidence

The application now ships with a comprehensive default configuration file (defaultConfig.js) that establishes baseline settings for themes, window behavior, avatar display, snippet sorting, tag visibility, editor preferences, and keyboard shortcuts. Additionally, a new localization module (electronLanguages.js) maps application locale IDs to Electron's underlying Chromium locale resources to ensure correct language packaging, while a dummy account configuration (accountDummy.js) is added to support build environments.

configs · high confidence

The search page now supports global content search using the fuse.js engine, allowing users to find gists by title, content, and tags. The interface features a modal with a search bar that highlights matching text in results and displays relative update times. Users can navigate the result list using Up/Down arrow keys, with automatic scrolling to keep the selected item in view, and press Enter to jump to the selected gist or Escape to close the modal.

app/containers/searchPage · high confidence

The login page now includes a language selector component, allowing users to change the interface language directly from the login modal. This change introduces internationalization (i18n) support by integrating a new \LanguageSelector\ container and utilizing i18n utility functions for text translation. The login modal's layout and styling have been updated to accommodate this new control, ensuring the interface is accessible in multiple languages from the initial login step.

app/containers/loginPage · high confidence

The new \app/containers/userPanel\ component provides the central user interface for managing GitHub interactions. It displays the user's profile image (with configurable hiding and Enterprise-specific defaults), allows creating new gists (including private ones by default), and triggers synchronization with progress feedback. The panel integrates with Redux for state management, handles IPC events for editor actions, and includes UI elements like logout and new-gist buttons with corresponding SVG icons.

app/containers/userPanel · high confidence

This release introduces a comprehensive architectural upgrade to the Lepton desktop application. The frontend has been migrated to React 19 with Redux, replacing the previous implementation, and the build system now uses Webpack with Babel for ES6 transpilation and Sass for styling. The application runtime has been upgraded to Electron 42, which enforces stricter security by enabling renderer sandboxing and context isolation; this requires a new preload bridge (\preload.js\) to expose a limited API (\window.lepton\) to the renderer process, removing direct access to Node.js globals. Configuration management now relies on \nconf\ reading from \\~/.leptonrc\, and logging has been standardized using Winston. The development environment targets Node.js 24 LTS, and the project includes a new Vitest-based test suite alongside Electron smoke tests for UI verification. Packaging is handled by \electron-builder\ with optimized file inclusion to exclude renderer-only dependencies from the main process bundle.

(repo-wide) · high confidence

The application has been completely rewritten from a simple Node.js script using \request-promise\ into a full-featured Electron app powered by React and Redux. This change introduces a modern UI with features such as GitHub OAuth login, snippet search, tag management, and immersive mode, replacing the previous basic gist-listing functionality.

app · high confidence

The application now uses the browser's native Notification API to display system-level alerts for success and failure events. These notifications are controlled by user preferences in the configuration (notifications:success and notifications:failure) and are silent by default. The notifier module exports specific functions for success and failure cases, relying on the Electron preload bridge to access the configuration.

app/utilities/notifier · high confidence

The app introduces a new CodeArea component that renders code blocks with syntax highlighting via Highlight.js, supporting languages such as Solidity, GraphQL, PHP templates, and various scripting languages. It adds built-in rendering for Markdown (including clickable task lists), AsciiDoc, and Jupyter Notebooks, with styling adjustments for Jupyter headers and output cells. The component adapts language detection based on file extensions and applies theme-aware highlighting styles.

app/containers/codeArea · high confidence

The application now includes a new main logger utility and a dedicated redaction module to prevent sensitive data from appearing in logs. The logging system has been updated to automatically detect and mask authentication secrets, tokens, and client secrets in log outputs, ensuring that credentials are not accidentally exposed in console or file logs.

app/utilities/logging · high confidence

A change to existing behaviour in build — 5 commits, 2 files.

build · medium confidence · unverified

The application introduces a centralized set of Redux action creators and type constants in app/actions/index.js to manage global state. This change consolidates actions for user authentication (login/logout, access tokens), gist operations (fetching, updating, syncing), UI modals (dashboard, about, edit, delete, pinned tags), and feature flags (immersive mode, new version notifications). By moving these definitions into a dedicated module, the codebase establishes the foundation for a unified state management layer, replacing scattered local state updates with a predictable, global store pattern.

app/actions · high confidence

The application now uses a centralized configuration system in app/utilities/config to manage user preferences. A new preferences module defines metadata for various settings, including themes, shortcuts, and snippet options, specifying whether changes take effect immediately, on the next use, or require a restart. Specifically, the 'snippet:downloadAll' setting is now explicitly managed within this framework, and a dedicated utility function determines the state of this download-all behavior, replacing previous fallback mechanisms.

app/utilities/config · high confidence

The application has adopted Redux to manage global state, replacing previous local state mechanisms. This change introduces a new \app/reducers\ directory containing a \rootReducer\ that combines individual reducers for key features such as login status, access tokens, gist lists, and various UI modals (about, dashboard, logout, pinned tags). This centralization ensures that state changes for these features are handled consistently through a single store, improving predictability and maintainability across the app.

app/reducers · high confidence

The application now requires the new Electron preload bridge for all renderer-to-main process communication, replacing the previous remote fallback. The \electronBridge\ module now detects if the preload script has injected the \window.lepton\ object; if not, it throws errors for all API calls (such as authentication, file access, and configuration), ensuring that legacy code paths cannot bypass the new security model. This change supports the broader shift to enable renderer context isolation and move sensitive operations like OAuth to the main process.

app/utilities/electronBridge · high confidence

The gist creation and editing interface now validates user input before submission. The form checks that the description and file contents are not empty, and validates filenames for invalid characters. If validation fails, the form prevents submission and displays specific error messages next to the relevant fields (description, filename, or content), helping users correct issues before saving their gists.

app/containers/gistEditorForm · high confidence

The GitHub authentication flow now includes robust session cleanup and better diagnostic capabilities. A new utility ensures that OAuth session storage is cleared and the authentication window is properly destroyed after use, preventing resource leaks and stale sessions. Additionally, new helper functions have been added to parse OAuth callback URLs, describe URL details for debugging, and correctly ignore specific Electron load failures (such as aborted loads), leading to a more stable and debuggable login experience.

app/utilities/auth · high confidence

The navigation panel now supports configurable snippet sorting, allowing users to order their gists based on settings in .leptonrc. This change also migrates the panel to use Redux for state management, enabling features like automatic scrolling to the active snippet and better handling of gist selection and fetching. The UI has been updated with new styling for snippet thumbnails, including support for public/private gist indicators and tag badges.

app/containers/navigationPanelDetails · high confidence

The app now supports resizable panels via a new SplitPane component in the main container, allowing users to adjust the width of the navigation details and snippet views. This change also implements a 'quiet' scrollbar style that remains hidden until the user hovers over the content area, reducing visual clutter while maintaining accessibility. Additionally, the layout adapts to an 'Immersive Mode' which hides the navigation panels for a focused coding experience.

app/containers/appContainer · high confidence

The application now uses a new main menu implementation in \app/utilities/menu/mainMenu.js\ that supports internationalization via a translation function \t()\. This update adds a 'Find in Page' feature to the Edit menu, which triggers an in-page search overlay, and includes platform-specific menu structures for macOS (such as speech controls and window management shortcuts). The View menu retains standard zoom and developer tools access, while the reload functionality has been commented out, aligning with the decision to disable the standard reload shortcut to prevent unintended navigation to the login page.

app/utilities/menu · high confidence

The markdown utility has been rewritten to use the Markdown-it parser, replacing the previous implementation. This change introduces support for rendering emoji shortcodes, clickable task lists with interactive checkboxes, and mathematical expressions via KaTeX. Code blocks now utilize Highlight.js for accurate syntax highlighting based on the detected language. Additionally, headings are automatically assigned unique IDs to enable anchor linking, and URLs are automatically converted into clickable links. To ensure safety, all rendered HTML is sanitized using a strict allow-list that permits standard formatting tags while blocking dangerous elements like scripts and iframes.

app/utilities/markdown · high confidence

This change introduces several new utility modules in app/utilities. accessTokenStorage.js and electronLocalStorage.js replace the previous Electron JSON storage dependency with a new system that supports encrypted token caching via safeStorage (with file-based fallbacks) and a dedicated local file storage implementation. newGistDraft.js adds logic to preserve snippet drafts when creation fails, ensuring user data is not lost on error. updatePolicy.js provides new logic for determining when to check for and notify about application updates based on version stability and auto-update settings. relativeTime.js adds a utility for formatting relative time strings.

app/utilities · high confidence

The GitHub API integration in app/utilities/githubApi has been rewritten to replace the previous request library with a custom adapter using Electron's native fetch API, which includes proper timeout handling and error mapping. This change also introduces support for GitHub Enterprise by allowing the API base URL to be configured via the .leptonrc file, and implements a concurrent sync strategy for retrieving gists that falls back to a sequential V1 method if the V2 API fails.

app/utilities/githubApi · high confidence

The snippet container now uses a set of new SVG icons (edit, eye, share, trash, lock, tags) for its control buttons and status indicators, replacing previous implementations. The component's layout and visual presentation have been updated to use React-Bootstrap components (Button, ProgressBar, Modal) and a new SCSS stylesheet that leverages CSS variables for theming, resulting in a more consistent and modern appearance for snippet controls, code areas, and header sections.

app/containers/snippet · high confidence

The application's local preference storage mechanism has been updated to comply with Electron's renderer context isolation. Instead of accessing localStorage directly, the store now relies on a local file for persistence and communicates with the main process via a new Electron preload bridge. This change ensures that user settings are saved securely and consistently within the isolated renderer environment.

app/utilities/store · high confidence

The parser in app/utilities/parser now recognizes and extracts hashtags in the Twitter style (e.g., \#tag1 \#tag2) in addition to the existing legacy format (\#tags: tag1, tag2). When parsing a description, the system first attempts to find legacy-style tags; if none are found, it falls back to extracting standalone hashtag tokens using a new regex-based extractor. This allows users to input tags in the more common Twitter format, which are then normalized into the application's internal tag structure.

app/utilities/parser · high confidence

The global content search now uses fuse.js instead of the previous engine, enabling more flexible matching across gist descriptions, filenames, languages, IDs, and file contents. Search results are ranked by field priority (description highest, file content lowest) and match position, and excerpts are generated with highlighted segments to help users quickly identify relevant matches.

app/utilities/search · high confidence

A new \compatPanel\ container has been added to provide a React 19-compatible implementation of the panel UI component. This module replaces standard React component patterns with direct \React.createElement\ calls to ensure correct rendering surfaces for logged-in users, including sub-components for panel headings, bodies, and collapsible sections.

app/containers/compatPanel · high confidence

The compatibility modal component in app/containers/compatModal has been updated to prevent crashes when used with React 19. This change ensures the modal renders correctly and handles lifecycle events (mounting, updating, unmounting) without errors, specifically addressing issues that arose after the React 19 upgrade.

app/containers/compatModal · medium confidence

A new utility module at app/utilities/ipcSubscriptions/index.js has been introduced to manage Electron IPC event listeners. It provides subscribeIpc to register listeners and track their cleanup functions, and unsubscribeIpc to safely remove all registered listeners and clear the subscription list, addressing potential memory leaks or stale event bindings in the renderer process.

app/utilities/ipcSubscriptions · high confidence

Added smoke tests for login flows and UI rendering; Added test coverage for application utilities; Added test coverage for code area, React 19 compatibility, dashboard charts, and UI components; Added tests for build and packaging configurations; Added tests for logging formatting and secret redaction; Added unit tests for core application reducers.

The application has been upgraded to version 2.0.0, introducing a comprehensive update to its dependency stack and build tooling. Key runtime dependencies now include React 19, Redux 5, and Electron 42, alongside modernized tooling such as Webpack 5, Babel 7, and Vitest for testing. The package manager has been standardized to npm (v11+), and the build process now incorporates automated license checking and linting. This shift replaces older libraries (such as the legacy request stack and older webpack versions) with current, maintained alternatives to improve stability and security.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 54 → 53 (-1.3)
• Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

• Code Health 47 → 47 (+0.0)
• Architecture 99 → 86 (-12.5)
• Maturity 60 → 60 (+0.0)
• Readiness 50 → 51 (+1.2)
• Security 77 → 73 (-3.0)
• Performance 60 (new)

• Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• Hotspot: app/containers/aboutPage/index.js (app/containers/aboutPage/index.js)
• Hotspot: app/utilities/accessTokenStorage.js (app/utilities/accessTokenStorage.js)
• Hotspot: tests/smoke/electron-packaged-smoke.js (tests/smoke/electron-packaged-smoke.js)
• Hotspot: tests/smoke/electron-render-smoke-main.js (tests/smoke/electron-render-smoke-main.js)
• Medium CVE: [GHSA redacted] (package-lock.json)

• FileTooLong: js/jqBootstrapValidation.js (docs/js/jqBootstrapValidation.js)
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• Low cohesion: Snippet (LCOM4 8) (app/containers/snippet/index.js)
• Low vulnerability: [GHSA redacted] (package-lock.json)
• Medium CVE: [GHSA redacted] (package-lock.json)
• Medium CVE: [GHSA redacted] (package-lock.json)
• Medium vulnerability: [GHSA redacted] (package-lock.json)
• Outdated (npm): @asciidoctor/core
• Outdated (npm): @mdit/plugin-katex
• Outdated (npm): autolinker
• Outdated (npm): boring-avatars
• Outdated (npm): codemirror
• Outdated (npm): electron-context-menu
• Outdated (npm): electron-is-dev
• Outdated (npm): fuse.js
• …and 11 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

hackjutsu/Lepton was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.