RFP - glossi

[soredake]

Checklist

• The package I am requesting does not already exist on https://community.chocolatey.org/packages;
• There is no open issue for this package;
• The issue title starts with 'RFP - ';
• The download URL is public and not locked behind a paywall / login;

Package Details

Software project URL : https://github.com/Alia5/GlosSI
Direct download URL for the software / installer : https://github.com/Alia5/GlosSI/releases/download/0.0.7.0/GlosSI-0.0.7.0.zip
Software summary / short description: Tool for using Steam-Input controller rebinding at a system level alongside a global overlay

[github-actions]

Package Request Validation

We have finished some basic validation of this request. The result of this validation can be found below:

Everything looks good to our automated checks, it is now up to a human to validate the remaining steps. No action is required yet

New Maintainer Notices

This section details some parts of the request that any upcoming maintainer may need to take into consideration.

File Validation Output

TrID/32 - File Identifier v2.24 - (C) 2003-16 By M.Pontello
Definitions found:  14827
Analyzing...

Collecting data from file: C:\Users\RUNNER~1\AppData\Local\Temp/software.tmp
 80.0% (.ZIP) ZIP compressed archive (4000/1)
 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)

Please note that this check is currently in alpha, and may not be able to detect everything correctly.
Humans may also be able to detect other issues with this request.

[Xav83]

I pick up this package 🙂

I actually already have created a Chocolatey package.
But, for now, it seems that the file GlosSI-0.0.7.0.zip is flagged as dangerous by too much security vendors (cf. Virus scan log)

[Xav83]

@soredake Do you want me to contact @Alia5, directly in the repository of GloSI, in order to see how to reproduce the issue of the Virus scan ?

[Alia5]

Odd.
Just tried myself, pretty much only GlosSIConfig.exe get's flagged. ¯_(ツ)_/¯
Dunno why. Perhaps it's my shitty shortcuts.vdf parser that has too many hex string in there?

The builds are taken directly from Appveyor, so unless they are compromised it's most certainly safe to use

[Xav83]

Indeed @Alia5, VirusTotal only flag GloSIConfig.exe 🤔

Maybe one way to have more information about this issue, would be to set up something like the VirusTotal GitHub Action.

[Alia5]

I did a lot of changes compared to the last release.
It seems that VirusTotal is now fine with GlosSI again
https://www.virustotal.com/gui/url/871382ac12fd2d51d81497c9634f78c9db72dd0936f0446ce6db48ea62904e96?nocache=1

You can validate this yourself with the latest release
https://github.com/Alia5/GlosSI/releases/tag/0.0.8.0

---

I still don't know why the last release was flagged, the only thing I could imagine in the shittiest possible implementation of the Steam-"shortcuts.vdf" parser, that has improved a bit in the last release.
But it's due to a rewrite anyway...

[Xav83]

Awesome ! I will update the package in the next few days 😉

[Xav83]

This package has been reviewed and approved by @TheCakeIsNaOH 🙂