Bmac222 wrote:

Ok, I just wanted to make this clear but Turbowarp Packager has its own license. This will make it hard to publish it to Inch and other sites. I recommend that you use this method so you do not get any copyright strikes.

TurboWarp/packager wrote:

We believe that packaging a project using the packager “makes use of an interface provided by the Library, but which is not otherwise based on the Library”

So, your website and project aren't bound by the LGPL, just the packager itself.

ALso the VSCode thing applies to most files you download off the internet.

JoshAtticus wrote:

I scanned it with Virustotal and the download file? Well, I'd stay away as it access “PersonalID.exe”: nice try though
EDIT: TurboWarp packager gets 1 detection but i'd say it's a false positive

The VirusTotal score gets even worse when you actually package an app; here's the VirusTotal score for the file makesfx generated when I told it to package an unmodified calc.exe (VirusTotal detects the name as “calc.exe” for some reason, but it's actually a makesfx program that contains calc.exe) I've seen actual malware with significantly better scores than that.

Any makesfx archive has an extremely high likelihood to trigger not just SmartScreen warnings, but actual warnings from antivirus software. Definitely not a great user experience.

I am a bit curious about that 1 apparent false positive for TurboWarp, though.

Bmac222 wrote:

Ok, I just wanted to make this clear but Turbowarp Packager has its own license. This will make it hard to publish it to Inch and other sites. I recommend that you use this method so you do not get any copyright strikes.

October 2022 update: The packager has since relicensed to the very permissive Apache 2.0 license. This makes this even less of a concern as this license is very prevalent in open source projects used by commercial companies.

Just don't go out of your way to modify minified JavaScript or remove license information and there is nothing additional for you to do. You won't get a copyright strike.

Here's a list of notable software that uses large amounts of code under a very similar or same license to the one used by the TurboWarp Packager (LGPL):

• Windows, macOS, ChromeOS, Linux
  
• iOS, Android
  
• Any Electron app (including Scratch Desktop)
  
• Any NW.js app (including the ones this guide makes)
  
• And so much more
  

If the LGPL isn't a dealbreaker for those projects, it probably isn't for you either.

Disclaimer: I am not a lawyer and this is not legal advice.

Bmac222 wrote:

Also there is strange text when you open it with VSC.

I assume you're either talking about encoded project data or minified JS? If you tell the packager to fit everything into a single HTML file, then that is inevitable regardless of the tool you use; HTMLifier will do something similar. If you make a zip instead of a single HTML file, the HTML file itself should be much more readable.

GarboMuffin wrote:

The VirusTotal score gets even worse when you actually package an app. I've seen actual malware with significantly better scores than that.

I'm sorry microsoft but the legacy calculator app is malware? And Microsoft's AV also flags it?

kccuber wrote:

GarboMuffin wrote:

The VirusTotal score gets even worse when you actually package an app. I've seen actual malware with significantly better scores than that.

I'm sorry microsoft but the legacy calculator app is malware? And Microsoft's AV also flags it?

I put C:\Windows\System32\calc.exe into makesfx and uploaded the resulting file to VirusTotal, that was the result. For unknown reasons VirusTotal is calling it “calc.exe” but that's not what it is.

The point of that was to demonstrate that any file generated by makesfx, regardless of the thing you archive, will have an abysmal antivirus score (Not just a SmartScreen warning, but actual virus warnings). I used calc.exe for that, but you could use any other program just as well.

An unmodified calc.exe itself does not get detected by antivirus software, of course.

GarboMuffin wrote:

kccuber wrote:

GarboMuffin wrote:

The VirusTotal score gets even worse when you actually package an app. I've seen actual malware with significantly better scores than that.

I'm sorry microsoft but the legacy calculator app is malware? And Microsoft's AV also flags it?

I put C:\Windows\System32\calc.exe into makesfx and uploaded the resulting file to VirusTotal, that was the result. For unknown reasons VirusTotal is calling it “calc.exe” but that's not what it is.

The point of that was to demonstrate that any file generated by makesfx, regardless of the thing you archive, will have an abysmal antivirus score (Not just a SmartScreen warning, but actual virus warnings). I used calc.exe for that, but you could use any other program just as well.

An unmodified calc.exe itself does not get detected by antivirus software, of course.

Wow. I hope you used a virtual machine to download that makesfx file.

kccuber wrote:

GarboMuffin wrote:

kccuber wrote:

GarboMuffin wrote:

The VirusTotal score gets even worse when you actually package an app. I've seen actual malware with significantly better scores than that.

I'm sorry microsoft but the legacy calculator app is malware? And Microsoft's AV also flags it?

I put C:\Windows\System32\calc.exe into makesfx and uploaded the resulting file to VirusTotal, that was the result. For unknown reasons VirusTotal is calling it “calc.exe” but that's not what it is.

The point of that was to demonstrate that any file generated by makesfx, regardless of the thing you archive, will have an abysmal antivirus score (Not just a SmartScreen warning, but actual virus warnings). I used calc.exe for that, but you could use any other program just as well.

An unmodified calc.exe itself does not get detected by antivirus software, of course.

Wow. I hope you used a virtual machine to download that makesfx file.

a separate computer and a vm

What? Just convert your project to JavaScript, Host it then convert it into a exe using Nativeifier. Easy.

TWTG93 wrote:

What? Just convert your project to JavaScript, Host it then convert it into a exe using Nativeifier. Easy.

or use TurboWarp Packager and package as a Windows Electron app. Easier.

dhuls wrote:

Bmac222 wrote:

Ok, I just wanted to make this clear but Turbowarp Packager has its own license. This will make it hard to publish it to Inch and other sites. I recommend that you use this method so you do not get any copyright strikes.

Fun Fact: It's just the GPL, not some fully-restrictive license.

If what you're doing makes GPL an issue, you shouldn't be doing it.

9pfs wrote:

dhuls wrote:

Bmac222 wrote:

Ok, I just wanted to make this clear but Turbowarp Packager has its own license. This will make it hard to publish it to Inch and other sites. I recommend that you use this method so you do not get any copyright strikes.

Fun Fact: It's just the GPL, not some fully-restrictive license.

If what you're doing makes GPL an issue, you shouldn't be doing it.

GPL is a terribly restrictive license lol
MIT-ftw

I (tried to) download the file however Firefox, Chrome, Edge and Opera stop me, and as soon as the download finishes on Free Download Manager, I get 4 notifications from Bitdefender, and 6 from Avast.

JoshAtticus wrote:

I (tried to) download the file however Firefox, Chrome, Edge and Opera stop me, and as soon as the download finishes on Free Download Manager, I get 4 notifications from Bitdefender, and 6 from Avast.

1. Why do you have an Antivirus?
2. Why do you have 2

JoshAtticus wrote:

I (tried to) download the file however Firefox, Chrome, Edge and Opera stop me, and as soon as the download finishes on Free Download Manager, I get 4 notifications from Bitdefender, and 6 from Avast.

multiple people said it's a suspicious file, dont use it. TW packager is better

MagicCrayon9342 wrote:

JoshAtticus wrote:

I (tried to) download the file however Firefox, Chrome, Edge and Opera stop me, and as soon as the download finishes on Free Download Manager, I get 4 notifications from Bitdefender, and 6 from Avast.

1. Why do you have an Antivirus?
2. Why do you have 2

why wouldn't you have an antivirus?

MagicCrayon9342 wrote:

MIT-ftw

Unlicense FTW

MagicCrayon9342 wrote:

JoshAtticus wrote:

I (tried to) download the file however Firefox, Chrome, Edge and Opera stop me, and as soon as the download finishes on Free Download Manager, I get 4 notifications from Bitdefender, and 6 from Avast.

1. Why do you have an Antivirus?
2. Why do you have 2

1. To stay safe
2. I'm quite paranoid

JoshAtticus wrote:

MagicCrayon9342 wrote:

JoshAtticus wrote:

I (tried to) download the file however Firefox, Chrome, Edge and Opera stop me, and as soon as the download finishes on Free Download Manager, I get 4 notifications from Bitdefender, and 6 from Avast.

1. Why do you have an Antivirus?
2. Why do you have 2

1. To stay safe
2. I'm quite paranoid

Do you ever go to any sketchy websites or download random files? If no, remove both!

Also Avast is known to be trash, have tons of paywalls. And constantly advertise with notifications. Malwarebytes ftw!