Bundle Report

org-whispersystems-signal-desktop v8.14.0

Bundle risk14low

Binary-only · L1Live analyzer output · not mock dataAnalyzed just now

v8.14.0build 1low· 14

048ae3bfd2a2ae93834a9f47718e3b3f05e800545cace78d6393d37b67c4c836

Platform: macOS · MACAPP
Bundle size: 585.9 MB
OS range: macOS 12.0 → macOS 12.0+
Architectures: arm64, x86_64
Permissions: 5

Store review readiness

Will flag at review

1 reviewer-flag item but no auto-rejection causes.

Safe to submit, but the reviewer may ask about the items above. Have answers ready and watch for review delays.

Blocking0

No pre-review rejection causes

None detected

Needs review1

Reviewer may ask

App Transport Security disabled globally

OK6

What was checked and passed

Required Reason API declarations match binary usage
ATT framework + NSUserTrackingUsageDescription consistent
Build SDK meets Apple's current floor
SDK-collected data types covered by app manifest
No version-confirmed CVEs against bundled SDKs
Static surface clusters with labeled-clean corpus neighbors· corpus k-NN bad-neighbor weight 0.23 (low)

1 findings

App Transport Security disabled globallyNetwork security · warning
Info.plist NSAppTransportSecurity.NSAllowsArbitraryLoads = true

Want PR-level context for this app?

Connect the GitHub repo for this app to upgrade to L3. You'll get per-PR Check Runs, source-aware risk factors, and root-cause attribution against this exact bundle.

Compare tiers