Download policy

Downloads start only after an explicit click. Pages never auto-start an installer.

Hosted files are uploaded to quarantine, hashed with SHA-256, checked for file type, and scanned before they can be published. Published objects are immutable.

The publisher of a program is shown on the page. If a file is revoked, the download is blocked and the page is updated.

Use the report form on a program page if a download is broken or looks wrong.