We recently added Debian APT repository support to ToDesktop. We needed to dynamically sign Debian repo manifests with PGP without exposing PGP private keys to unnecessary risk or turning our system into a tangled mess. The solution? Cloudflare Workers service bindings. They let us isolate sensitive operations, keep our codebase clean, and get isolated visibility into what's happening. Here's how we made it work.

A security researcher reported that they was able to gain access to leaked access tokens of ToDesktop’s Firebase Service Account.

We have reviewed logs and inspected app bundles. No malicious usage was detected. There were no malicious builds or releases of applications from the ToDesktop platform.

We're thrilled to announce a significant enhancement for developers using ToDesktop for their desktop app creation: Tailwind CSS support! This new feature stems from a simple yet powerful idea—integrating ToDesktop-specific Tailwind modifiers like todesktop:hidden and mac:rounded-lg. This integration streamlines the styling process, enabling developers to apply platform-specific styles effortlessly, without the need for a separate global.css file.

Transitioning from an individual developer's certificate to an organization's certificate for an Electron app on macOS can be a tricky process, particularly when it comes to maintaining a seamless auto-update experience for your users. In this guide, we'll walk through the steps to ensure a smooth transition between certificates, preventing errors and ensuring your app's designated requirements (DR) are met.

In this article, we will guide you through the process of decompiling a production Electron app on Mac or Windows. I've found this useful for debugging issues that only seem to appear in the production app but not in development. It's also a neat trick if you want to look into the source of any Electron Application.