MyCast

Baseline release verification

Automated static checks inspected release and package identity, malware, dependency inventory, vulnerability advisories and potential secrets in supported files. Secret scanning skips native PE, ELF and Mach-O binaries. High and Critical dependency findings block admission; lower-severity advisories remain visible. Review individual results for actual coverage and expiry. Native lifecycle and full source-code security validation are not established by these checks.

Installer signing: Unsigned — this installer does not have a publisher signature.

Minimum operating system

Not specified

Minimum RAM

Not specified

Recommended free space

3 GB plus space for application data and backups

Publisher-declared required runtimes

Microsoft Edge WebView2

These prerequisites are publisher declarations. This website does not inspect your device or verify that it meets them.

The package’s operating system and processor identity were checked. Installation compatibility and minimum system requirements have not been established by runtime testing.

• Installer file identityPassed

  The exact GitHub release asset bytes, SHA-256 digest and size were checked.

• Package and architecturePassed

  The nsis package and its x64 application payload were inspected without running the application.

• Publisher authorizationPassed

  Current repository access, publisher ownership and free distribution authorization were verified.

• Source and release identityPassed

  The GitHub release, declared channel, asset IDs and immutable source commit match this review.

• Malware scanPassed

  21945 files scanned; 0 infected files. Exact linked source snapshot and passively extracted installer; no application code executed. Expanded 1 PyInstaller runtime archives into 12048 inert files (327840402 bytes), including supported Python bytecode and native runtime libraries; no application code was executed.

• Dependency inventoryPassed

  Inventoried 903 source dependencies and 188 packaged dependencies. Exact linked source snapshot and passively extracted installer; no application code executed. Expanded 1 PyInstaller runtime archives into 12048 inert files (327840402 bytes), including supported Python bytecode and native runtime libraries; no application code was executed.

• Dependency vulnerability assessmentPassed

  High and critical vulnerabilities block publication. Dependency findings: 0 critical, 0 high, 14 medium, 2 low, 0 unknown, 2 info. High and critical findings block publication; lower severities are advisories. Exact linked source snapshot and passively extracted installer; no application code executed. Expanded 1 PyInstaller runtime archives into 12048 inert files (327840402 bytes), including supported Python bytecode and native runtime libraries; no application code was executed. 18 lower-severity or unrated advisories remain; the publisher receives the detailed findings.

• Secret patterns in supported filesPassed

  Gitleaks checks recognizable credential patterns in supported source/extracted text and passively extracted CPython 3.12 literal constants. Native PE, ELF and Mach-O binaries are skipped. Constants are scanned separately; variable assignments, dynamically assembled values and program behavior are not reconstructed. This is not comprehensive bytecode analysis. 22203 input files were supplied; the inspected-file count is not measured. 0 unreviewed potential embedded credentials remain from 16 original tool matches. Values are never included in reports. 16 original high generic-api-key matches were retained as reviewed information after exact-file, position and matched-byte checks against the fixed upstream review registry. 16 lower-severity or unrated advisories remain; the publisher receives the detailed findings.

• Publisher signingNot required

  Trusted operating-system publisher signing was not established. This release policy permits that disclosed limitation.

• Installation and application behaviorNot run

  Native installation, launch, update and uninstall testing has not run in this static review.

• Comprehensive source analysisNot run

  Dependency and secret scans do not constitute comprehensive source-code or application behavior analysis.

• Reproducible build provenanceNot run

  Source commit identity is checked; reproducing the binary from source is outside this review.

Last successful scan

Oct 11, 2026

Rescan recommended after

Oct 18, 2026

Release approval

Retained for this unchanged release

Release policy

2026-09-10.release.1

Download size

275,553,736 bytes

SHA-256

c380ba7a9b49b094b679df47cf47595ba918bba2b4dc90c0b280d6f058405c7f

Scan age and unavailable rescans do not remove this release’s approval. The original check dates remain visible; each download requires fresh authorization.

These checks apply to this exact file. They do not guarantee all future behavior. About release verification