All those tools are dog shit. I made an app in python and used nuitka to bundle it so Windows users didn't need to install python and edit system PATH etc. Windows Defender detects it as malware. It's a very, very basic front end for a command line utility, there is nothing malicious about it. But bad actors use nuitka too so must be bad!
It is a common problem on Windows.
Solutions?
- Make it harder for novice users to use your app.
- Try bundle it with pyinstaller instead. (Worse performance than nuitka).
- Pay money for nuitka commercial license.
- Pay money and get your app signed.
- Make users install it via the Windows store.
I went the pyinstaller route and Windows Defender still decided to send the binary off for testing but at least it didn't delete it and say its malware this time.
- If it doesn't understand what’s happening they assume its malware.
- If a heap of people haven't used that application it might be malware!
- If a legitimate app does something that malicious apps commonly do... malware!
They have no fucking clue. These tools inability to stop false reporting everything as malware means no one trusts them when they do report something or they distrust the innocent application that is being falsely reported. Its a complete shit show.
For user repositories like the AUR, people who have no fucking clue should not be using them. Users who are a bit smarter need to listen to the warnings and actually read the recipes of everything they try build from the AUR. If something looks sus or you just don't understand what its doing, then don't use it.
