Code Signing and Privacy Policy for NumeRe

Code Signing Policy

This project provides authenticode-signed installers to increase the users security by confirming the authorship and the immutability of the binary.

The used authenticode certificate (Verified Publisher Certificate) was gently provided for free by the SignPath Foundation and the signing process uses the SignPath.io toolchain directly integrateable into a GitHub workflow.

Core team members

• Project lead and approver: Erik Hänel

• Other associated organisational members:

  • adjiap

  • ayoub Selmi

  • markrampion

  • Marco Stranner

Privacy Policy concerning the Application

This application will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it.

Possible user-triggered network interactions are the following:

• Usage of the Package Manager or the update checker (no personal information is transmitted, only the required technical connection information like IP). This also applies to the implicit usage of the Package Manager from the terminal triggered especially via typing install PACKAGENAME

• Usage of the issue reporting feature. Especially in the bug case, the attached excerpt of the log file may contain restricted or confidential information. In case of doubt, do not attach any logging exceprt and try to describe the issue in case as precise as possible.

• Usage of commands providing network access like mail, database and url and code that uses them.