Desktop app forensics · macOS / Windows

Know the stack. Verify the evidence.

Inspect the bundle, identify the framework, and verify who signed it—all from one local command.

npm i -g @wavever/buildby

Node.js 18+ · MIT licensed · local only

buildby — zsh

buildby ChatGPT

Analysis complete: ChatGPT

ChatGPT /Applications/ChatGPT.app

Cross-platform⚡ Electron

Cross-platform desktop application built with Web technologies (HTML/CSS/JS)

https://www.electronjs.org

Evidence:

app.asar

Bundle ID:: com.openai.codex
Version:: 26.715.31925
Size:: 1.38 GB

Signature & Notarization

Developer:: OpenAI OpCo, LLC
Team ID:: 2DC432GLL2
Signature:: Signed
Notarization:: Notarized
Hardened Runtime:: Yes

buildby ChatGPT Bundle inspection / evidence matrix

01 / Trace

Trace the verdict back to the files.

Start broad, isolate the runtime, then inspect the evidence behind the match.

Map the entire machine.

Scan installed applications in one pass and expose the runtime distribution across the desktop.

buildby --all

buildby — all

buildby --all

Analyzed 68 applications

Desktop application technology stack report
Scanned 68 applications · 38.23 GB total

Browse applications by stack…

Inventory / runtime distribution68 APPS

Narrow the field.

Filter by framework to compare versions, bundle identities, sizes, and locations without noise.

buildby --electron

buildby — Electron

buildby --electron

Scan complete

⚡ Electron applications — 19 total

Application                    Version       Size        Bundle ID / Path
─────────────────────────────────────────────────────────────────────────
ChatGPT                       26.715.31925  1.38 GB     com.openai.codex

Framework filter / identity tableELECTRON

02 / Method

No guesswork in the pipeline.

Every result moves through the same inspect, verify, and report sequence.

01Target: Resolve an app name, path, machine scan, or framework filter.
02Inspect: Read framework directories, resources, linked binaries, and metadata.
03Verify: Check developer identity, signature, notarization, and hardened runtime.
04Report: Return the classification together with the evidence that produced it.

03 / Coverage

A field guide to the modern desktop.

No admin privileges. No binary disassembly. Every scan stays on the machine.

Web runtimes: Electron · Chromium · CEF · NW.js
Cross-platform UI: Flutter · Tauri · Qt · wxWidgets · React Native
Managed runtimes: JVM · .NET · Unity
Native fallback: Swift · Objective-C · Win32
Platforms: macOS · Windows