Observer v0.4.0 — no command line needed: double-click and it scans
Observer v0.4.0 — no command line needed: double-click and it scans
Finds what's wrong — and shows you the fix. This release is all about getting out of your way. Observer already produced one clean, offline report; now you don't even need a terminal to get it. Double-click the binary and a click-and-scan dashboard opens in your browser.
✨ Highlights
- Double-click to run — zero command line. Launch the binary with no arguments (e.g. by double-clicking it) and Observer starts its local dashboard and opens your browser automatically: paste a folder, click Scan, read the report. Past scans, stack, issue counts, and "new since last scan" all live on one page. Prefer the CLI? It works exactly as before —
observer analyze .and friends are unchanged. - Grab-and-go download. The project page now has a one-click download button for each OS right at the top — no hunting through release assets. You're scanning in seconds.
🔒 Still true (everything from v0.3.0)
Single self-contained binary. Fully offline (--assert-offline enforces it). No account, no telemetry. Redesigned report — grouped findings, "Fix These First," standards-aligned Security Rating (A–E). Code + dependencies + config + infrastructure in one pass. Auto-detects Semgrep / PHPStan / Bandit / gosec / ESLint. Multi-language native rules (PHP, JS/TS, Python, Java, Ruby). Dependency CVEs via OSV.dev. Every finding carries a before→after fix.
📦 Install
Download the binary for your OS below and run it — or use a package manager:
# Windows (Scoop)
scoop install https://raw.githubusercontent.com/sanks205/getobserver/main/packaging/scoop/observer.json
# macOS / Linux (Homebrew)
brew install https://raw.githubusercontent.com/sanks205/getobserver/main/packaging/homebrew/observer.rb
Binaries are unsigned — verify against SHA256SUMS.txt. Free & MIT. Optional one-time Observer Pro add-ons (branded PDF, scheduled scans, premium framework rules for Laravel / CodeIgniter / WordPress / Symfony / Django / Rails / Spring / Express).
Feedback welcome — especially on false positives and which rules/languages to add next.