I tested REA, GitHub's viral reverse engineering tool, on a 100 MB Electron app. Here's where its static analysis impressed and where it failed.

Inspect a local Electron/JavaScript directory or ASAR without executing its code. analyze_javascript_application and the CLI routes below return an Evidence record with the application graph, static ...