Repository navigation
KeeFetch v1.3.0
KeeFetch 1.3 adds guided setup, clearer batch results and four study-selected fetch profiles. The updated website includes installation help, profile comparisons and four genuine KeePass screenshots.
Highlights
- Guided first-run profile choice with an explanation of third-party favicon requests.
- Four settings tabs: Overview, Downloads, Providers and Advanced. Save applies the draft; Cancel leaves the previous settings intact.
- Structured completion summaries with updated, skipped, not-found, error and cancelled counts, diagnostic paths, Copy Summary and one bounded retry of eligible misses/errors.
- Study-selected profiles: Fast uses Direct Site + Yandex (22 s); Balanced uses Direct Site + Google + Twenty Icons (15 s); Privacy uses Direct Site (22 s); Precise uses Direct Site + Google (22 s). All stop after a strong resolver hit and disable synthetic fallbacks. Custom retains manual provider and fallback choices.
- Complete installation, profile, privacy, troubleshooting, benchmark and contributor documentation on the seven-page website.
Upgrade and migration
Close KeePass and back up the database and KeePass configuration before replacing the plugin. Install either the PLGX or DLL, not both.
Legacy Fast maps to Fast (bulk-fast), Balanced to Balanced (everyday), and Thorough to Precise (max-coverage). Custom and unknown legacy values map to Custom. Custom provider/order/timeout choices should remain intact; inspect Settings after upgrading. Confirmed first-run choices and saved settings are persisted immediately.
No database-format migration is introduced. Downloaded icons change database content, so restoring an earlier plugin does not undo icon updates.
Security and reliability
- Resolver redirects are followed manually and recognized private destinations are refused before contact at each redirect hop.
- Certificate-chain overrides are confined to KeeFetch's client and hosts classified as private/internal. Public hosts retain strict validation; hostname mismatches and missing certificates remain rejected.
- KeeFetch requests TLS 1.2/1.3 through its own handler without changing KeePass's process-wide settings. Older runtimes that reject this setting retain host defaults.
- Transient provider timeouts no longer poison the negative cache for the rest of a batch. Coalesced requests allow each caller to cancel its own wait independently.
- A database containing only Recycle Bin entries no longer produces a zero-entry download confirmation.
Privacy and known limitations
Enabled favicon resolvers may receive entry domains. Privacy disables these resolvers and Android store lookup, but Direct Site can still contact private targets and fetch site-linked assets or redirects on other hosts. Lexical private-host checks do not inspect DNS answers or prevent DNS rebinding.
Plaintext diagnostics can include titles and resolved URLs beside the database or in a temporary directory. Privacy does not redact those files. Inspect and redact them before sharing, and treat exported CSV content as untrusted in spreadsheet software.
Provider results depend on live sites, provider availability and the network environment. The six-entry screenshot demonstrates one successful Privacy run, not a universal success rate. The expanded study compares 19 candidates and all 827 cold icon units, using disclosed machine review and a 138-unit / 92-image direct spot-check. Four unresolved app identities receive zero usability credit. Precise changed winner under ambiguity replay; the owner explicitly selected conservative scoring, and the report preserves that sensitivity. See the study report.
Install and recover
Copy KeeFetch.plgx into the Plugins folder beside KeePass.exe, then restart KeePass. The host validation target is KeePass 2.60 on Windows with .NET Framework 4.8. Check Tools → Plugins and Tools → KeeFetch after installation.
To roll back, close KeePass, restore the earlier plugin, and restore your backed-up configuration if affected. Restore the database backup to undo unwanted icon changes.
Verification
Candidate source is 9f0b43f64335803d24ca99d6ccc7e0e7abac3bb8; subsequent CI-fixture and evidence changes do not alter production source. Exact candidate SHA-256 values:
| File | SHA-256 |
|---|---|
KeeFetch.dll |
924c6c5c1a38b99e8805b01e20569f3fdb50c2941576c567f5e1f406e4311ad5 |
KeeFetch.plgx |
4742355b5cadb089c7898b99d7a6ff95d068f8319ad97b3a1eb15b1d186a53a8 |
Installation/update/rollback and functional host checks are accepted from the owner; see manual host results. All four screenshots are accepted and integrated; the clean Privacy example shows six updates and zero misses/errors, corroborated by its diagnostics. Release assets retain these exact host-tested bytes. Compare your download with its matching entry in the attached SHA256SUMS.txt. See the release-validation record.