Release integrity

How the Helper can be verified

Open application code

The Media Bridge backend is distributed as readable Python source rather than a generated first-party executable. Users can inspect it directly or review it with a code-analysis tool before installation.

Upstream runtimes

The release build downloads the official Python embeddable package and verifies its published SHA-256 checksum. FFmpeg and Deno are pinned separately, and their build metadata, licenses, and hashes accompany the package.

Release requirements

  1. The archive must originate from a tagged public commit.
  2. Automated tests and extension lint must pass.
  3. Dependency versions, notices, required source, checksums, and an SBOM must accompany the release.
  4. The install and uninstall commands must remain readable text scripts and operate only for the current Windows user.

Privacy statement

Media Bridge will not transfer information to other networked systems unless specifically requested by the user operating it. A download request connects the local Helper to the media URL selected by the user. Media is not uploaded to a Media Bridge cloud service. See the privacy policy.