Weaver 0.1.0 — first public release (macOS)

Weaver's first public release — the macOS app.

Weaver is a native HTTPS debugging proxy. It captures HTTP(S) traffic, decrypts
it with a root certificate generated locally on your Mac, and lets you inspect
requests and responses in a native interface. Nothing leaves your machine.

What's in it

• HTTP/1.1, HTTP/2, and WebSocket capture
• HTTPS decryption via a per-install root CA, generated on your Mac and never
  transmitted anywhere
• Traffic grouped by client app and by domain, with live filtering and search
• Request/response inspector with syntax-highlighted, collapsible bodies
• HAR export

Install

Download Weaver-0.1.0.dmg below, open it, and drag Weaver to Applications.
The app is signed with a Developer ID certificate and notarized by Apple, so it
opens without a Gatekeeper warning.

On first run Weaver asks for admin permission to install and trust its root
certificate in the System keychain. That prompt is what makes HTTPS decryption
possible; you can remove the certificate from within the app at any time.

Requirements

macOS 14 or later. Universal binary — Apple silicon and Intel.

Known limits

• Traffic from apps that use certificate pinning cannot be decrypted. That is
  by design on their part, and Weaver does not attempt to defeat it.
• QUIC / HTTP/3 traffic is not captured.
• No auto-update in this release — new versions are a fresh download from this
  page.
• The iOS app is coming soon and is not part of this release.

Verify the download

shasum -a 256 Weaver-0.1.0.dmg

and compare against Weaver-0.1.0.dmg.sha256, published alongside it.