[Geany-Users] Can these portable windows builds be trusted?

[Oliver]

I used to be the maintainer of this project but have since moved on with my
life. Biggest thing is I became a linux user and bought a laptop so there
was little point in using a windows port.   John T Haller is currently
maintaining/packaging it.

The package is open source, and the NSI source code for the program is
available in the Other\Source directory if you would like to check out the
code and compile/build it yourself.

PortableApps.com (if I remember correctly) lists the publisher for every
app as "geany team" or "firefox team" etc.  John had his own way of doing
things (i.e. revision builds always started with 2 for some reason) and
there was no point in arguing with him.

I never had any issues or qualms trusting packages from PortableApps.com
for the 4/5 years I used them but that was 10+ years ago - again see point
of becoming a linux user.  However, I would happily use packages from there
again.

On Mon, Nov 29, 2021 at 7:30 AM Enrico Tröger <enrico.troeger at uvena.de>
wrote:

> Hi,
>
> >> Some time ago (few years) I searched for portable windows build.
> >> There's one, at PortableApps, but that's what I found now:
> >> https://portableapps.com/apps/development/geany_portable
> >>
> >> What I found previously is for version 1.24:
> >> with filename GeanyPortable_1.24.paf.exe
> >> I don't remember where I got it that time, so I assume it has same
> >> source, although I never used it. I searched it mainly because learning
> >> in university, where machines use windows, so using portable version
> >> was the only way in case of need to get geany on windows for some
> >> reason. But it so happened, that I never had such need (just carried
> >> laptop with myself).
> >>
> >> Now I went across this file and decided to check for updates. What's
> >> interesting - publisher is named 'Geany Team', with url leading to
> >> geany site. However, I found no info, leading to portableapps, at
> >> download page, github tracker and users mailing lists (though I did not
> >> check other lists yet).
> >>
> >> So question - can that publisher be trusted, is it really related to
> >> geany team?
> >
> > AFAIK none of the Geany team are involved in the publication of the
> > portable app, so we have no idea if it is trustworthy or not.
>
> There is definitely no one of the Geany team involved in those builds.
> Many years ago, we had contact with one of the maintainers of this
> portable build package but this does not mean we checked the resulting
> app. Also, since this is long ago, the current maintainer might have
> changed.
>
> > It is mentioned on the website at the "Third Party Packages" page, but
> > that does not mean that it is endorsed by or in any way checked by the
> > Geany project.
>
> Exactly, it is third party and so can only be trusted if you can trust
> the third party.
>
> I'm afraid you need to check yourself if it is acceptable for you to use
> this app or not. We cannot guarantee this package is safe to use.
>
> Regards,
> Enrico
>
> --
> Get my GPG key from https://www.uvena.de/pub.asc
> _______________________________________________
> Users mailing list
> Users at lists.geany.org
> https://lists.geany.org/cgi-bin/mailman/listinfo/users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.geany.org/pipermail/users/attachments/20211129/b7082820/attachment-0001.htm>