DiffViewer aims to ship its Windows release binaries signed with a free open-source code signing certificate provided by the SignPath Foundation via SignPath.io.
Status: Application to the SignPath Foundation is pending. Until the certificate is in place, release binaries are unsigned and Windows SmartScreen warns on first run; see the README's "Install" section for the click-through path.
This policy applies to all release artifacts published to the
GitHub Releases page.
Today that is a single-file portable DiffViewer.exe; once auto-update
support ships, a Setup installer will be added alongside it and will
also be covered by this policy.
DiffViewer is a single-maintainer open-source project.
- Committers and reviewers: @geevensingh
- Approvers: @geevensingh
DiffViewer is a local-only developer tool. The only networked activity
it performs is on direct user action — fetching a GitHub pull request
the user has explicitly asked it to review, using their existing
gh auth login credentials. No telemetry, usage tracking, analytics,
or background networked activity is performed. See PRIVACY.md
for the full policy.