MerginMaps / MerginMaps/mobile
Windows Defender SmartScreen warning displayed when installing Mergin Maps for Windows
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 388
- Forks
- 87
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 20
Description
**Description**
---------------------------
When a user downloads and attempts to install the Mergin Maps Windows application, Microsoft Defender SmartScreen displays a security warning stating that the application is from an "Unknown publisher" and that running it may put the PC at risk. This warning appears every time the installer is launched and may prevent users from installing the application, as less technical users are likely to click "Don't run" instead of "Run anyway."
**Steps to Reproduce**
----------------------------
1. Download the Mergin Maps Windows installer
2. Open the downloaded .exe file.
3. Observe the Windows Defender SmartScreen dialog.
**Actual Result**
---------------------------
Microsoft Defender SmartScreen displays a warning dialog with the message: "Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk." The Publisher is listed as Unknown publisher. The user must click "Run anyway" to proceed with the installation.
**Expected Result**
-----------------------------
The Windows installer is signed with a valid, trusted code signing certificate. Microsoft Defender SmartScreen does not display a security warning and the application launches directly after the user confirms the installation via the standard UAC prompt.
**Attachments**
----------------------------
_Screenshot of the SmartScreen warning dialog._
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Begin by locating the Windows installer packaging and release entry point that produces the downloaded .exe. Verify how code signing is applied and confirm completion by installing it and checking that SmartScreen no longer reports an unknown publisher.
Written by the indexing model from the issue text.
Assessment
- Domain
- release, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100