Hacker News Reader

Is scanning only based on regex? Or can it, say, parse a JWT and infer who it came from through those properties?

GitHub PM here. It scans using regexes and then applies post-processing. So yep, it can (and does) parse JWTs to understand their properties.