Lemus

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

What is signed

The Windows releases of Lemus plugins: each plugin's standalone app (.exe) and VST3. They are built by GitHub Actions from the public source at github.com/lemus-dev/lemus, from the release's version tag, and a person approves every signing request. The macOS installers are not signed through SignPath.

Team

  • Committers and reviewers: the members of the lemus-dev organization on GitHub. Changes from anyone else are reviewed by a member before they are merged.
  • Approvers: the owners of the lemus-dev organization.

Privacy

The plugins collect nothing about you and send nothing anywhere you haven't asked them to, with one exception: once a day, while a plugin window is open, the update check reads one small file from lemusdev.org to see whether there is a newer version. The request carries no data about you. About › Check for updates once a day turns it off. The links in About open your browser.