Trenchcoat Check a coin
AS$ASSAYnew$18.1K+56.9%CU$CUBSnew$137K+3006.0%BO$BOLTnew$13.5K+50.9%$KIMIBLTnew$70.7K+31.1%$XTOnew$24.8M+59028.0%BT$BTCnew$128K+36.3%XO$XOTnew$187K+8.6%SO$Sojonew$36.5K+204.0%$SOJOnew$154K+737.0%SO$Sojonew$49.7K+590.0%TU$TURTLEnew$10.7K+131.0%SO$SOJOnew$24.4K+239.0%DO$DOUPInew$41.3K+1248.0%$.AiTownnew$20.5K+15.1%SO$SOJOnew$15.1K+72.3%$MoonCoinnew$18.5K+17.2%TH$THUNDRnew$23.1K$ASTEROIDnew$50.3K+35.6%SO$Sojonew$22.4K+86.3%$KOBEnew$111K+163.0%SO$SOLVETnew$12.9K+46.1%$‮I4SSnew$503K+17.2%CL$CLOUTnew$73.6K+847.0%XP$XPLACEnew$49.2K+460.0%$SOLVETnew$58.8K+48.1%SO$Sojonew$21.1K+135.0%$Xnew$127K+204.0%$Sojonew$37.4K+307.0%$SOJOnew$175K+323.0%XP$XPLACEnew$30.1K+317.0%CL$CLOUTnew$29.2K+143.0%$Sojonew$53.2K+21.8%$VEIL$1.1M-20.5%$PAID$2.6M-2.6%$BATON$5.6M-10.1%$DARK$985K+42.8%$XTO$14.2M+38.9%$MISTAKE$774K-24.6%$HOOKED$981K-26.5%$E/ACC$403K-8.1%
App blueprint · 14 Oct 2026

usebruno/bruno

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

Template-written 39 evidence items MITREA + LIEF read 1 executable1830 source files scanned
What this means for you

bruno includes PostHog, so it can send usage or crash data to that service.E5

  • It's open source under the MIT License licence, so anyone can read and check its code.E2
  • Usage analytics: Sends data about how you use the app to an analytics service.E5
  • Internet access: It contains code to connect to the internet.E6E9E10
  • Starts other programs: It can start other programs on your computer, for example to open files or links.E36
  • We opened the official download (bruno_4.2.1_x64_win.exe) without running it: 5 web addresses built in, a code signature.E35E38E39

What it is

  • The project describes itself as: “Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)”E1
  • It's written mainly in JavaScript (files: js, ts, json, jsx).E1
  • The latest release (v4.2.1) has downloads for Linux, Windows and macOS.E4
  • 47549 people starred it on GitHub; the code was last updated 2026-10-13.E3

Where your data goes

AI providersSend text or data to an AI model. 4
api.anthropic.comAnthropic: AI models (Claude) 1×E27
console.anthropic.comAnthropic: AI models (Claude) 1×E26
api.openai.comOpenAI: AI models (ChatGPT's maker) 1×E25
platform.openai.comOpenAI: AI models (ChatGPT's maker) 1×E24
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
unpkg.comunpkg: open-source file CDN 2×E22
Not identifiedServices we don't have in our list yet. 13
github.comnot identified 18×E12
cacerts.digicert.comnot identified 5×E31
crl3.digicert.comnot identified 5×E32
ocsp.digicert.comnot identified 5×E30
schema.getpostman.comnot identified 5×E19
git-scm.comnot identified 4×E14
schema.postman.comnot identified 4×E20
crl4.digicert.comnot identified 1×E34
helloanoop.comnot identified 1×E23
in.linkedin.comnot identified 1×E15
opencollection.comnot identified 1×E17
rawgit.comnot identified 1×E29
www.digicert.comnot identified 1×E33

What it can do on your computer

Usage analytics

Sends data about how you use the app to an analytics service. Signals: PostHog.E5

PostHog

Internet access

It contains code to connect to the internet. Signals: axios (HTTP client), node-fetch and WebSockets.E6E9E10

axios (HTTP client)node-fetchWebSockets

Starts other programs

It can start other programs on your computer, for example to open files or links. Signals: CreateProcessW and ShellExecuteExW.E36

CreateProcessWShellExecuteExW

Loads extra code

It can load code libraries while running (often graphics drivers, plugins or scripts). Signals: LoadLibraryExW.E37

LoadLibraryExW

Local web server

Runs a small web server on your computer. Signals: local web server.E8

local web server

File watching

Notices when files on your computer change. Signals: watches files for changes.E7

watches files for changes

What it's built from

Libraries in its dependency files that tell you something about what it does. The many ordinary ones are left out.

LibraryWhat it's forDeclared in
posthog-nodeE5PostHogpackages/bruno-app/package.json:89
axiosE6axios (HTTP client)packages/bruno-cli/package.json:58
node-fetchE9node-fetchpackages/bruno-js/package.json:33
wsE10WebSocketspackages/bruno-requests/package.json:42
expressE8local web serverpackages/bruno-electron/package.json:67
chokidarE7watches files for changespackages/bruno-electron/package.json:57

The app you download

We downloaded bruno_4.2.1_x64_win.exe (121.9 MB) from the project's latest release and read it without running it.

bruno_4.2.1_x64_win.exe

Format
PE · 121.9 MB
Signature
code-signed
Libraries
7: ADVAPI32.dll, COMCTL32.dll, GDI32.dll, KERNEL32.dll, SHELL32.dll, USER32.dll
Starts programs
CreateProcessW, ShellExecuteExW
Loads code
LoadLibraryExW
Web addresses
5: ocsp.digicert.com, cacerts.digicert.com, crl3.digicert.com, www.digicert.com, crl4.digicert.com

E35E36E37E38E39

The latest release (v4.2.1) has downloads for Linux, Windows, macOS.

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Repository: usebruno/bruno
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
GitHub description · https://github.com/usebruno/bruno
E2
Licence: MIT License
GitHub license · https://github.com/usebruno/bruno
E3
47549 stars, last push 2026-10-13
GitHub activity · https://github.com/usebruno/bruno
E4
Latest release v4.2.1 (2026-09-30) with 29 files
GitHub release · https://github.com/usebruno/bruno/releases/tag/v4.2.1
E5
Depends on posthog-node (PostHog)
packages/bruno-app/package.json @ 89:None · “posthog-node” · manifest scan
E6
Depends on axios (axios (HTTP client))
packages/bruno-cli/package.json @ 58:None · “axios” · manifest scan
E7
Depends on chokidar (watches files for changes)
packages/bruno-electron/package.json @ 57:None · “chokidar” · manifest scan
E8
Depends on express (local web server)
packages/bruno-electron/package.json @ 67:None · “express” · manifest scan
E9
Depends on node-fetch (node-fetch)
packages/bruno-js/package.json @ 33:None · “node-fetch” · manifest scan
E10
Depends on ws (WebSockets)
packages/bruno-requests/package.json @ 42:None · “ws” · manifest scan
E11
Web address in source: usebruno.com
package.json @ 22:16 · “usebruno.com” · source scan
E12
Web address in source: github.com/swagger-api/swagger-js/blob/v3.36.1/src/resolver/apidom/refe
packages/bruno-app/src/components/ApiSpecPanel/Renderers/Swagger/index.js @ 10:3 · “github.com/swagger-api/swagger-js/blob/v3.36.1/src/resolver/apidom/refe” · source scan
E13
Web address in source: link.usebruno.com/apps
packages/bruno-app/src/components/EmptyAppState/index.js @ 6:24 · “link.usebruno.com/apps” · source scan
E14
Web address in source: git-scm.com/download/win
packages/bruno-app/src/components/Git/GitNotFoundModal/index.js @ 21:15 · “git-scm.com/download/win” · source scan
E15
Web address in source: in.linkedin.com/company/usebruno
packages/bruno-app/src/components/Preferences/Support/index.js @ 63:15 · “in.linkedin.com/company/usebruno” · source scan
E16
Web address in source: oauth.usebruno.com/callback
packages/bruno-app/src/components/RequestPane/Auth/OAuth2/AuthorizationCode/index.js @ 170:48 · “oauth.usebruno.com/callback” · source scan
E17
Web address in source: opencollection.com
packages/bruno-app/src/components/ShareCollection/index.js @ 116:21 · “opencollection.com” · source scan
E18
Web address in source: www.usebruno.com/pricing
packages/bruno-app/src/components/Sidebar/GoldenEdition/index.js @ 129:30 · “www.usebruno.com/pricing” · source scan
E19
Web address in source: schema.getpostman.com/json/collection/v2.0.0/collection.json
packages/bruno-app/src/utils/importers/postman-collection.js @ 39:6 · “schema.getpostman.com/json/collection/v2.0.0/collection.json” · source scan
E20
Web address in source: schema.postman.com/json/collection/v2.0.0/collection.json
packages/bruno-app/src/utils/importers/postman-collection.js @ 41:6 · “schema.postman.com/json/collection/v2.0.0/collection.json” · source scan
E21
Web address in source: cdn.usebruno.com
packages/bruno-common/src/api-docs/index.ts @ 54:36 · “cdn.usebruno.com” · source scan
E22
Web address in source: unpkg.com/vue
packages/bruno-common/src/runner/reports/html/template.ts @ 22:18 · “unpkg.com/vue” · source scan
E23
Web address in source: helloanoop.com/
packages/bruno-electron/package.json @ 12:50 · “helloanoop.com/” · source scan
E24
Web address in source: platform.openai.com/api-keys
packages/bruno-electron/src/ipc/ai/providers.js @ 19:21 · “platform.openai.com/api-keys” · source scan
E25
Web address in source: api.openai.com/v1/models
packages/bruno-electron/src/ipc/ai/providers.js @ 21:44 · “api.openai.com/v1/models” · source scan
E26
Web address in source: console.anthropic.com/settings/keys
packages/bruno-electron/src/ipc/ai/providers.js @ 30:21 · “console.anthropic.com/settings/keys” · source scan
E27
Web address in source: api.anthropic.com/v1/models
packages/bruno-electron/src/ipc/ai/providers.js @ 32:44 · “api.anthropic.com/v1/models” · source scan
E28
Web address in source: appinfo.usebruno.com
packages/bruno-electron/src/ipc/notifications.js @ 6:51 · “appinfo.usebruno.com” · source scan
E29
Web address in source: rawgit.com/components/handlebars.js/master/handlebars.js
packages/bruno-tests/collection/lib/notes.js @ 170:22 · “rawgit.com/components/handlebars.js/master/handlebars.js” · source scan
E30
Web address inside the released app: ocsp.digicert.com
bruno_4.2.1_x64_win.exe @ byte 0x743df87 · “ocsp.digicert.com” · string scan
E31
Web address inside the released app: cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
bruno_4.2.1_x64_win.exe @ byte 0x743dfad · “cacerts.digicert.com/DigiCertTrustedRootG4.crt0C” · string scan
E32
Web address inside the released app: crl3.digicert.com/DigiCertTrustedRootG4.crl0
bruno_4.2.1_x64_win.exe @ byte 0x743dff5 · “crl3.digicert.com/DigiCertTrustedRootG4.crl0” · string scan
E33
Web address inside the released app: www.digicert.com/CPS0
bruno_4.2.1_x64_win.exe @ byte 0x743e5f1 · “www.digicert.com/CPS0” · string scan
E34
Web address inside the released app: crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
bruno_4.2.1_x64_win.exe @ byte 0x743e69c · “crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0” · string scan
E35
REA identified bruno_4.2.1_x64_win.exe as pe (sha256 80b0dc5fb89d…)
bruno_4.2.1_x64_win.exe · “80b0dc5fb89debbe” · REA inspect-artifact
E36
bruno_4.2.1_x64_win.exe imports functions that start other programs: CreateProcessW, ShellExecuteExW
bruno_4.2.1_x64_win.exe · “CreateProcessW, ShellExecuteExW” · LIEF import table
E37
bruno_4.2.1_x64_win.exe can load code libraries at runtime (LoadLibraryExW)
bruno_4.2.1_x64_win.exe · “LoadLibraryExW” · LIEF import table
E38
bruno_4.2.1_x64_win.exe links 7 system libraries
bruno_4.2.1_x64_win.exe · “ADVAPI32.dll, COMCTL32.dll, GDI32.dll, KERNEL32.dll” · LIEF
E39
bruno_4.2.1_x64_win.exe is code-signed
bruno_4.2.1_x64_win.exe · “signature” · LIEF

Limits

  • We read the app's code and its official download without running it. Code that exists may never run for you, and behaviour decided by servers is invisible.
  • Web addresses and libraries show what the app can talk to or do, not that it does so every time you use it.
  • Only open-source apps with a public GitHub repository are analysed. The release we inspected may differ from builds in app stores.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id wKzN9mH6.