Downloads
Code signing policy
Free code signing provided by SignPath.io, certificate by SignPath Foundation.
- What is signed
- The Windows installer,
MiniHub-x.y.z-Setup.exe, and the programs MiniHub is made of:MiniHub.exe, its audio engine and its VST3 scanner. Signing is being set up: the releases up to 0.9.5 are not signed. - How it is built
- Only what GitHub Actions builds from the public repository is signed — never a build made on a personal machine. The native libraries it compiles against are fetched at pinned revisions, and every release carries its SHA-256 sums.
- Committers and reviewers
- DavidfromMonaco. MiniHub has one maintainer, who writes and reviews every change.
- Approvers
- DavidfromMonaco. Each signing request is approved by hand, one release at a time.
- Privacy
- This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it.
- Plug-ins
- The VST3 plug-ins you load into MiniHub are other people's programs, under their own terms. One that signs you in, checks a licence or downloads sounds does so itself, not through MiniHub.
- Licences
- Open source: MIT, and the GNU AGPLv3 for the native audio engine and the VST3 scanner, which link the JUCE framework.
- Checking a file
- Right-click it, Properties, Digital Signatures: a signed MiniHub file names SignPath Foundation. Something wrong? Say so.