# How to audit source code of proprietary Electron app
[](https://www.youtube.com/watch?v=s4S7qgCkVCc "How to audit source code of proprietary Electron app")
- Computer running macOS Big Sur or Monterey or disposable [Tails USB flash drive or SD card](../how-to-install-tails-on-usb-flash-drive-or-sd-card-on-macos)
## Caveats
- When copy/pasting commands that start with `$`, strip out `$` as this character is not part of the command
> Heads-up: replace `QR\ Bridge.app` with Electron app one wishes to audit.
```console
$ npx asar extract /Applications/QR\ Bridge.app/Contents/Resources/app.asar ~/Desktop/source
npx: installed 17 in 6.041s
```
### Step 5 (optional): list files
```console
$ tree ~/Desktop/source -I node_modules
/Users/sunknudsen/Desktop/source
├── LICENSE
├── README.md
├── app
│ ├── confirmation.wav
│ ├── index.html
│ ├── preload.js
│ ├── renderer.js
│ └── style.css
├── icon.ai
├── main.js
├── package.json
└── qr-bridge.code-workspace
1 directory, 11 files
```
### Step 6: audit app
> Heads-up: `code` is a command line utility that opens file or folder in [Visual Studio Code](https://code.visualstudio.com/).
> Heads-up: **please respect license**… being able to audit app does not mean app (including its source code) should be considered public domain.
```shell
code ~/Desktop/source
```
### Step 7: check if app calls home
Use application-layer firewall such as [Little Snitch](https://www.obdev.at/products/littlesnitch/index.html) or [Lulu](https://objective-see.com/products/lulu.html).
👍
## Linux guide
### Step 1: boot to Tails and set admin password (required to run commands using `sudo`)
> Heads-up: if keyboard layout of computer isn’t “English (US)”, set “Keyboard Layout”.
Click “+” under ”Additional Settings”, then “Administration Password”, set password, click “Add” and finally “Start Tails”.
### Step 2: import [Node.js](https://nodejs.org/en/)’s PGP public key
