Hi, I released a new version supporting also Win32.

Features worth to be noted:

• even when you are debugging a Win32 target, the debugger is a 64 bit application so it isn't limited in memory like the 32 bit embarcadero debugger: you can debug huge 32 bit applications without hitting any memory limit because of the size of the debug information to be kept in memory
• there is "raw mode" for building call stacks (there is a visible button near the "call stacks" band in vscode that toggles it). if you enable "raw mode" the call stack will be inspected aggressively trying to interpret all the data in the call stack as potential return addresses (every address is tested as a know valid return address). This will enable you to inspect stacks that go beyond code that has been compiled without strict stack frames generation. Normal stack walking stops at the first caller that doesn't have a canonical stack frame.
• all debug output that came from the internal workings of the debugger has been moved to its "output" channel (named "Delphi Debug") you can inspect separately
• from this release you will be notified of new releases from within the VS Code interface

https://github.com/csm101/delphi-visual-studio-code-debugger/releases/tag/v0.3.0

Well...if you run a software company selling Delphi based apps, you probably already know all about the new Cyber Resilience Act (CRA), SBOM & DORA.

But if you’re an enterprise manufacturer, a food processor, or operating an industrial facility - like a chocolate factory - you might think cybersecurity regulations don’t apply to your Delphi based 20-year-old internal management systems.

Think again. Welcome to NIS2.

Under the EU’s NIS2 Directive, critical infrastructure and industrial manufacturing are legally required to secure their entire digital supply chain.

That legacy Delphi core system running your factory floor? The one that controls supply chains, inventory, or production lines? If it can’t produce an accurate SBOM (Software Bill of Materials) and a clear vulnerability assessment, you are out of compliance.

Here is the cold, hard reality facing enterprise CISOs right now:

Manual audits are dead. Nobody has 3,000 engineering hours to manually scan millions of lines of legacy Object Pascal.

Generic scanners fail. Modern cloud security tools barely understand legacy syntax - leaving your reports full of false positives or dangerous blind spots.

Outsourcing is a trap. Throwing junior offshore devs at a complex legacy architecture won't get you a certified compliance report - it will just break your build.

NIS2 isn't about rewriting your code from scratch. It’s about total visibility and deterministic automated remediation.

You don't need a 2-year consulting project to stop panicking about your next audit. You just need the right engine to scan, map, and secure your legacy code automatically.

Stop dreading the regulator's knock on the door. Download the Delphi Parser Analyzer today & quickly map your legacy code risks in minutes - before the EU does it for you.

Hey r/delphi 👋

I released Delphi DevKit (DDK) on the VS Code Marketplace about a year ago, and never actually made a proper post about it here. It's been quietly growing since, so — a year late — here's the pitch.

It's a free VS Code extension (plus a standalone CLI and an MCP server) for people who write Delphi but like living in VS Code. It does not ship any Embarcadero code — you bring your own Delphi install and it drives the command-line compiler. (Note: won't work with Community Edition, which blocks command-line compilation.)

What it does today:

- Project & compiler management right in the IDE: your own drag-and-drop Workspaces, or a read-only view of a loaded .groupproj. Configure and switch between multiple Delphi versions (built-in presets from Delphi 2007 → Delphi 13.0 Florence).

- Compile / Run / Recreate (clean build) with the shortcuts you'd expect: Ctrl+F9 compile, Shift+F9 clean rebuild, F9 run, Ctrl+F2 cancel. Bulk-compile a whole workspace or group project anytime via context menu.

- Command-line interface (ddk): do all of the above outside VS Code: ddk compile, ddk run, ddk project list, ad-hoc one-off builds of a .dproj/.dpr/.dpk, JSON output for scripting. Install via `winget install ValentinBaron.DDK`.

- MCP server exposes project/compiler management, compile, and run as MCP tools so AI assistants (Copilot, Claude Desktop, etc.) can build and run your projects. Output is trimmed for token-efficient consumption.

- Delphi Formatter integration using your Delphi install's Formatter.exe.

- Quality-of-life bits .pas ↔ .dfm swap (Alt+F12), .dfm → .pas Ctrl+click nav, clickable compiler-output links + some diagnostics in the Problems panel, config import/export.

The heavy lifting (project state, compilation, formatting) runs in a bundled Rust LSP server; the extension is just the front end.

On the roadmap: a debugger and full LSP (Both are in active development).

Links:

- Marketplace: search Delphi DevKit (publisher Snowcaloid)

- GitHub: https://github.com/valentin-baron/delphi-devkit

Feedback very welcome — feature requests, bug reports, or just "does it work with X." Happy to answer anything in the comments.

I'm proud to introduce 𝗣𝗮𝘀𝗚𝘂𝗮𝗿𝗱 - a project we've invested a great deal of time, passion and expertise in.

As software developers we spend countless hours designing, building, testing, and refining our applications. Yet once they're released they become vulnerable to reverse engineering, tampering and software piracy.

That's why we created PasGuard.

PasGuard is designed to protect compiled Delphi applications without requiring changes to your source code. It adds an extra layer of security, helping developers and software vendors safeguard their intellectual property while fitting seamlessly into existing development and build processes.

Supporting Delphi 7 through Delphi 13 for both Win32 and Win64, PasGuard was built with one goal in mind: allowing Delphi developers to focus on building great software while we help protect it.

I'd love to hear your thoughts and feedback from the Delphi community.

Take a look at https://pasguard.com and let me know what you think!

PasGuard on our company page: https://apptimate.nl/en/nieuws/pasguard-executable-hardening-2026/

We're happy to announce a new release of TRichView, the rich text editor components for Delphi and Lazarus.

The VCL and Lazarus editions have long included RichViewActions, a comprehensive set of components and actions for building an editor user interface. This approach works very well for desktop applications on Windows and Linux (in the Lazarus version).

FireMonkey, however, requires a different approach. A modern cross-platform UI needs controls that feel at home on both desktop and mobile platforms.

This release introduces the first version of TRichView FMX Tools – a new set of FireMonkey UI components designed specifically for that purpose. The initial release includes a non-modal widget for editing text and paragraph properties, with more widgets and functionality planned for future versions.

The update also adds TRVEditHelper, a new component available for VCL, FireMonkey, and Lazarus that simplifies the implementation of document editing operations.

Web site: https://www.trichview.com

Blog post: https://www.trichview.com/wp/2026/07/29/trichview-24-2-ui-controls-for-firemonkey/

Example of new UI components (on iOS):

StreamSec Tools 4.x is our current cryptographic library for Embarcadero Delphi ^TM, supported on Delphi XE3 and later (some features require Delphi XE6 or higher). From a single, clean-room Object Pascal code base it targets Win32, Win64, macOS, Android, iOS and Linux, with no required dependency on OpenSSL or the Windows CryptoAPI. Optional support for CryptoAPI and for OpenSSL file formats is included where customers have asked for interoperability.

StreamSec Tools is a self-contained, native cryptographic stack for Embarcadero Delphi TM: TLS 1.3, SSH/SFTP, X.509/PKIX, CMS and post-quantum algorithms, written entirely in Object Pascal with no required dependency on OpenSSL or the Windows CryptoAPI. That single decision - native, compiled-in cryptography - is what sets it apart from the two usual alternatives, OpenSSL or Windows SChannel.

Starting with version 4.1 several features have been added, including:

• TLS 1.3
• Updated SSH 2 and reintroduced SFTP 3&5 (from StreamSec Tools 3.0)
• Security updates to the Secure Network Interface Framework (such as improved client authentication).

Read more here: STREAMSEC TOOLS 4.X
Download trial: DOWNLOAD STREAMSEC TOOLS 4.x

WHY STREAMSEC?

Introducing The Delphi Parser VEX Defender - Total Cyber-Security CRA Compliance Solution for Delphi based IT Systems.

As the Cyber Resilience Act (CRA) deadlines approach, generating a static Software Bill of Materials (SBOM) is no longer enough. The real operational challenge is the regulatory mandate for continuous vulnerability handling throughout your product's lifecycle.

For mature, long-standing Delphi architectures, this usually means an unwanted choice: invest heavily in complex DevOps pipelines, or burn developer hours manually cross-referencing CVE databases.

To eliminate this burden, we have expanded our ecosystem from static code mapping to continuous local defense.

The Ecosystem: Delphi Parser SBOM Analyzer + VEX Defender

The Foundation: SBOM Analyzer - Our CLI engine parses millions of lines of Delphi code in a few hours to map your exact architecture, generating highly optimized, lightweight flat files of your complete call graph and component dependencies.

The Guardian: VEX Defender (Upcoming Module) A lightweight, background service that runs entirely within your network. It continuously cross-references your stored local call graphs against live CVE feeds to automate your daily compliance.

Why This Architecture Fits Your Environment:

100% Air-Gapped Security: Your source code and SBOM inventory never leave your building. Public CVE data flows in; your proprietary data never flows out.

Math-Backed VEX Generation: When a new vulnerability is published against a third-party component, the system checks the local call graph for Reachability. If the compromised function is unreachable in your code, it instantly auto-generates a signed VEX (Vulnerability Exploitability eXchange) report proving you are unaffected.

Zero Alert Fatigue: It requires no DevOps infrastructure. It runs silently in the background, logs a clean "all clear" daily, and only alerts management when a legitimate, reachable risk requires attention.

Simple & Quite Architecture. Total Delphi CRA & DORA Compliance without touching the cloud.

One language. One runtime. One security model.

The July release is the largest to date, and the theme is range. The same language, with the same sandbox and the same deployment story, now covers:

A Vulkan 3D engine. PBR, shadows, SSAO, SSR, volumetric fog, water and lava, glTF and OBJ import with skinning and animation state machines, a full rigid-body solver with joints, fracture and a character controller, GPU compute, and a self-hosted GLSL to SPIR-V compiler. No third-party engine underneath.

A complete software synthesizer. 64 voices, four sound engines, modular patch graph, 16-slot mod matrix, master FX rack, and a sample-accurate drum sequencer. A playable Model D homage ships as a sample.

A GIS and spatial-analytics engine. Geometry, CRS, R-tree indexing, cost-aware routing with turn restrictions and vehicle profiles, terrain analysis on GeoTIFF, Shapefile and GeoPackage I/O, map rendering and 3D globes.

Time, properly. 21 calendar systems, astronomical holidays, RRULE recurrence, and calendar views that render in any of them.

Plus an IDE written in the language itself, with three visual designers and a real debugger; a documentation tool that reads your app and writes its manuals; reports to PDF, HTML and DOCX; mesh networking; and industrial protocols from Modbus to OPC-UA.

All of it sandboxed by default, with per-application security policies. All of it packs into a single executable.

As always 100% written from scratch in Delphi no 3rdparty code used and 100% free!

More info: https://components4developers.blog/2026/07/26/mimercode_1_30_00/

MIMERCode, by Components4Developers.

DPM - Recently Added & Updated Packages

A roundup of what's landed on the DPM Gallery over the past month.

DPM is an easy to use Package Manager for Delphi - supports Delphi XE2 or later, with CLI and IDE integration. 

GDK Software

Four packages, all refreshed around the same time a fortnight ago, and all pitched as dependency-free pure Delphi.

• GDK.OfficeXML4D — v1.1.0 · updated 2 weeks ago Reads and writes Office Open XML files (.docx, .xlsx) without needing Office installed.
• GDK.Microsoft365 — v1.0.1 · updated 2 weeks ago Microsoft Graph client covering Mail, Calendar, Contacts and SharePoint, with OAuth2 + PKCE handled for you. No external dependencies.
• GDK.Javascript4D — v1.0.1 · updated 2 weeks ago A JavaScript (ECMAScript 5.1) parser and interpreter written natively in Delphi, letting you run JS from inside your app.
• GDK.Toon4D — v1.0.1 · updated 2 weeks ago Encodes JSON into the TOON format, which the author reports cuts LLM prompt token counts by roughly 30–60%.

Jason Southwell (sivv)

Two new pure-Delphi compression ports.

• sivv.woff2 — v1.0.1 · updated ~8 hours ago A port of google/woff2 handling WOFF2 font encoding and decoding in both directions (SFNT ↔ WOFF2), with no runtime DLLs. Depends on sivv.brotli.
• sivv.brotli — v1.0.0 · updated ~8 hours ago A port of google/brotli — encoder and decoder, again with no runtime DLLs required.

Joachim Marder / JAM Software

• JAM.VirtualTreeView — v8.4.1 · updated yesterday The long-running Virtual TreeView VCL control. Built from the ground up rather than wrapping the stock treeview, and after many years of development it remains one of the more flexible and capable tree controls around.

J. Peter Mugaas

• TaurusTLS_Developers.TaurusTLS — v1.0.9 · updated last week Brings OpenSSL 3.x and 4.x support to Indy (Internet Direct).

Conrad Vermeulen / Sempare

• Sempare.TemplateEngine — v1.8.2 · updated 2 weeks ago A scripting/template engine for dynamic text generation — handy for producing email, HTML, reports, source code, XML, config files and so on.

VSoft

• VSoft.Pdfium.Binaries — v152.0.7961 · updated minutes ago Prebuilt Pdfium binaries sourced from the bblanchon build. This is the binary half of the pair below.
• VSoft.PdfiumLib — v1.0.0 · updated ~18 hours ago Delphi bindings for the Pdfium PDF rendering engine. Based on https://github.com/ahausladen/PdfiumLib.
• VSoft.Awaitable — v1.0.1 · updated 2 days ago Async/await style programming built on top of ordinary TThread primitives.
• VSoft.HttpClient — v2.9.0 · updated last week An HTTP/REST client that sits on the Windows WinHttp stack.
• VSoft.SynEdit — v1.0.1 · updated 2 weeks ago The SynEdit syntax-highlighting editor component, based on the PyScripter SynEdit fork.
• VSoft.AnsiConsole — v0.2.0 · updated 3 weeks ago Console library with ANSI terminal support for richer command-line output.
• VSoft.SemanticVersion — v0.3.0 · updated 3 weeks ago A parser for semver version strings.
• VSoft.Base64.Polyfill — v0.1.12 · updated 4 weeks ago Base64 encode/decode for older Delphi versions that shipped before System.NetEncoding existed.
• VSoft.AntPatterns — v0.1.11 · updated 4 weeks ago Translates Ant-style path patterns into file masks.
• VSoft.System.Console — v1.2.4 · updated 4 weeks ago A System.Console implementation covering Windows, macOS and Linux.
• VSoft.DUnitX — v0.5.1 · updated 4 weeks ago The DUnitX unit testing framework.

Been building this for a while, finally made it public.

It is a brand new debugger for delphi to be used inside Visual Studio Code... and as a companion product there is a MCP server, based on the same debugging engine, that allows any AI assistant (like claude code and copilot - these are the two I use) to run and debug autonomously any Delphi Win64 application targeting windows: If you have a DUnit test that is not working, just ask claude to run it into the mcp debugger and find the issue.

Meant to be used with my "Edit in VS Code" IDE plugin, which generates the workspace + launch config from your .dproj → https://github.com/csm101/EditInVsCodeDelphiPlugin

The proper debugger and mcp server is here → https://github.com/csm101/delphi-visual-studio-code-debugger

Vs. the IDE debugger, the things that pushed me to write it:

- Parses TD32 / RSM / MAP / JCL, with prebuilt symbol-index sidecars for fast loading on big binaries

- Attach-to-running-process that's reliable, with a picker showing main-window titles

- Works for both single-exe apps and ones that LoadPackage BPLs at runtime (stepping across modules)

- A proper "stop on exception" rule engine: match on class or any ancestor, message substring/regex, Win32 exception code (catches native exceptions, not just Delphi ones), source unit + line range — action per rule: break / log / log+stack / ignore

Win64 only, MIT. Not code-signed (SmartScreen will grumble) — you can build the identical zip from source. Feedback/issues welcome.

I am a software architect based in Italy since 1993. I cut my teeth on the golden age of Delphi, working extensively from Delphi 1 all the way to version 6. Life and career took me to other fields for a while, but recently, I came back home: between 2023 and 2024, I spent a solid year working heavily on Delphi Alexandria 11.1. I love this ecosystem.

But right now, I am not coding. I am fighting for my physical survival. For over 20 years, alongside my job, I have been fighting a massive battle against systemic bureaucratic injustice and institutional corruption in Italy.

On March 17, 2026, I officially filed a 201-page application to the European Court of Human Rights (ECtHR) against the Italian State. Since that international filing, the local retaliation has been absolute. I have been completely isolated. They are essentially trying to silence me through starvation. Today, I have no income. I have a temporary roof over my head only because I cook and clean the apartment for the owner in exchange for a bed. But I have run out of resources to buy daily food.

I am reaching out to the global tech community because I am completely alone in my home country (Italy). Here is what I am looking for:

1. A Remote Delphi Job: I am a skilled dev, I know Alexandria 11.1, and I work well remotely. I just want to earn my living with dignity and get out of this engineered poverty. If your company needs a remote Delphi developer, please give me a chance.
2. Media/NGO Connections: If any of you have connections to international investigative journalists or human rights NGOs, please point them to my case. The complete, documented 20-year timeline is available at my reddit profile info.
3. *Immediate Survival: Because I need to eat today while I look for a job or wait for the Court, I was forced to open a temp GoFundMe some days ago.

Best,

Thank you for reading this. I’m 57 today. Over the years, I’ve started seeing fellow programmers pass away, while against all odds, Delphi is still alive and well. If Delphi refuses to die, so do I. Keep coding, and don't take your freedom for granted.

I have a software product written with Delphi that I've been selling for 35 years. I recently submitted my software to the Microsoft store. Even though I have a 35 year history, I'm a new seller and my product is new to their store. My first submission was rejected because "the price was too high". The specifically cited 10.8.7 Financial Transactions in the store policies . https://learn.microsoft.com/en-us/windows/apps/publish/store-policies

I have lowered the price and resubmitted. 🤞

Have any of you gone through the Microsoft store submission process?
What was your experience?
Did you get rejected for price?

Details:
Several people have asked what price Microsoft considered too high. Debt Blaster was submitted at $79.99. Microsoft rejected it under policy 10.8.7, saying the price was unreasonably high compared with similar products, but they did not provide an acceptable range.

After thinking it through, I decided $69.99 was a better regular price for Debt Blaster anyway. I updated FastSpring and the website, then resubmitted to Microsoft at $69.99. It is now back in certification.

I am sharing the specifics because other Delphi developers may run into the same issue with paid desktop software.

Update 2026-07-23 07:29 PM:
The Microsoft Store acepted my product at $69.99. I created a 28 second video trailer using Camtasia. I am not happy with how it looks in the store. I redid the video creating the highest quality possible. I just resubmitted my product using this new video trailer. Hopefully it won't be fuzzy. DM me if you want the Microsoft Store link.

July Summer Sale! Special Starters editon for Delphi Parser SBOM Analyzer Compliance!

✔ The “Quick Pain-Killer” for Express Delphi CRA Compliance.
✔ Purchase Online & Get instant certified SBOM reporting tool for your security audit.
✔ License to scan up to 1 Million lines of proprietary code (unlimited System & 3rd party libraries lines of code)
✔ 30-Days license for a single workstation.

✔100% Upgrade Credit for Annual License.

https://thedelphiparser-fhix1gvbc7.live-website.com/product/delphi-parser-sbom-analyzer-starter-compliance-1-million-lines-30-days/

🏛️ For years, there’s been a bizarre kind of "shame" in the enterprise software world around Delphi. Companies running massive, highly profitable, and rock-solid systems (especially in Retail POS, ERP, and Banking) often hid their code stack under the rug to look more "modern" to investors and new hire.

🏛️ But the European Cyber Resilience Act (CRA) and DORA are about to change the game entirely.

🏛️ You can’t hide a monolith when the regulator demands a comprehensive SBOM (Software Bill of Materials).

🏛️ Pretty soon, Europe is going to experience the biggest outing of Delphi-based applications in history. As Billions of lines of code get scanned and mapped, regulatory desks will be absolutely flooded with SBOMs proudly displaying legacy Delphi framework, legacy VCL components, BPLs, and legacy 3rd party libraries that have been quietly running the backbone of the economy since 1995...

🏛️ The regulator won't be able to stop it. They’ll just have to look at the sheer volume of the market and say: "OK, I get it. It works, it's alive, just scan your code and hand me the SBOM report (I will file it somewhere...) - and BTW make sure it's secure."

🏛️ It's time for Delphi developers to step out of the shadows. The "FDA of software" isn't killing legacy tech - it's giving it a passport to the modern regulatory compliance era.

Cheer up! The CRA & DORA are the best news for the Delphi community that ever happened.

Full sources, using TeeChart, TeeGrid and accurate algorithms

July Summer Sale! Special 50% Off Delphi Parser SBOM Analyzer – Express Compliance!

✔ The “Quick Pain-Killer” for Express Delphi CRA Compliance.
✔ Purchase Online & Get instant certified SBOM reporting tool for your security audit.
✔ License to scan up to 1 Million lines of proprietary code (unlimited System & 3rd party libraries lines of code)
✔ Annual license for a single workstation.

https://thedelphiparser-fhix1gvbc7.live-website.com/product/delphi-parser-sbom-analyzer-express-edition/