{"about":{"meta_title":"About WaveFlow","meta_description":"Who makes WaveFlow, how a release is built, signed and mirrored, the licence of each app, dated facts you can check, and what WaveFlow is not.","kicker":"About","title":"Who makes WaveFlow, and how it ships","editorial":"Made by one developer, released in public.","intro":"WaveFlow is a family of apps for people who keep their own music: a desktop player, a server you host yourself, phone apps, a player for one file at a time and a lyrics editor. This page says who makes them, how a release reaches you, under which licence each one is published, and what WaveFlow is not.","who":{"title":"Who makes it","body":["WaveFlow is a personal, non-commercial project. One developer, InstaZDLL, writes and releases every app of the family. There is no company behind it, and nothing to pay for.","The open-source apps are built in public on GitHub: their code, their issues, their design notes and every release are there for anyone to read, and bug reports, ideas and fixes are welcome."],"profile_link":"InstaZDLL on GitHub"},"release":{"title":"How a release reaches you","intro":"The desktop player's path from a change in its code to the update on your computer, as its release guide describes it.","steps":[{"title":"Every change says what it is","body":"Each change is recorded with a conventional commit message. A release bot reads them, works out the next version number and opens a release pull request that bumps every version file and writes the changelog."},{"title":"A person decides","body":"Nothing ships until the maintainer reviews and merges that pull request. The merge tags the version and opens its release on GitHub."},{"title":"Built in the open","body":"GitHub's build machines make every installer from that tag, with public logs: Linux on a pinned Ubuntu 24.04, checked against the oldest system library it needs, Windows, and one macOS build for both Intel and Apple silicon."},{"title":"Signed, and checked before it installs","body":"Each update is signed with the project's own key, and the signature names its version. The app checks both before it installs anything, and refuses a file that was altered or relabelled."},{"title":"Two places to download from","body":"Since the 2.0 betas, every file is also copied to download.waveflow.app. The app asks both hosts and keeps the newest signed version, so one of them going down stops no update."},{"title":"Package managers follow","body":"Once the release is out, workflows update winget, the AUR, Fedora Copr and the APT repository on their own. A ready copy of the release pipeline for GitLab sits in the player's, the server's and QuickPlay's repositories, so losing GitHub would cost hours, not a rewrite."}],"guide_link":"Read the release guide"},"licences":{"title":"Licences","intro":"The player, the server, QuickPlay and both phone apps are open source: anyone may read, change and share their code under the licence below.","head_app":"App","head_licence":"Licence","head_source":"Source","registry":"Plugin registry","unpublished":"{licence}, source not published yet","private_repo":"Private repository","notes":["Tempora is in early preview, and its code is not public yet.","The registry that lists the plugins, and the template to write one, are under the MIT licence. Each plugin carries its own licence, and some are closed source: their compiled file is published and pinned by its fingerprint in the registry, their code is not."]},"facts":{"title":"Dated facts","intro":"What can be checked, and where to check it. Read on {date}; a fact that changes gets a new date.","head_fact":"Fact","head_value":"Value","head_source":"Source","head_date":"Date","rows":{"player_stable":{"label":"Latest stable WaveFlow"},"player_first":{"label":"First WaveFlow release"},"player_releases":{"label":"WaveFlow releases published, betas included"},"server_stable":{"label":"Latest WaveFlow Server"},"server_first_stable":{"label":"First stable WaveFlow Server"},"quickplay_stable":{"label":"Latest WaveFlow QuickPlay"},"mobile_builds":{"label":"Published phone app builds","value":"None yet, on Android or iPhone"},"languages":{"label":"Languages of the player and of this site"},"update_signature":{"label":"Update signature","value":"minisign, bound to the version"},"windows_signing":{"label":"Windows code signing","value":"Authenticode, with a self-signed certificate"},"macos_signing":{"label":"macOS signing","value":"Ad hoc, not notarized"},"mirror":{"label":"Download mirror","value":"download.waveflow.app: the stable and beta channels, and QuickPlay"}}},"not":{"title":"What WaveFlow is not","intro":"Said plainly, so nobody installs WaveFlow expecting something else.","privacy_link":"What the player sends, feature by feature","items":[{"title":"Not a streaming service","body":"WaveFlow plays the music files you own. There is no catalogue to rent and nothing to subscribe to."},{"title":"No account to create","body":"The player and QuickPlay work without signing in anywhere. A WaveFlow Server account lives on your own server, and Last.fm or ListenBrainz are there only if you connect them."},{"title":"No telemetry","body":"The apps report nothing about how you use them. Some features do go online, such as covers, lyrics and the update check: the player's privacy policy lists each one, and Offline mode cuts them at once."},{"title":"No ads, no paid tier","body":"Every app is free, with nothing held back for a paying version."},{"title":"No phone app in the stores yet","body":"The Android and iPhone apps are in development, in public repositories. Neither has a published build."},{"title":"Not all open source","body":"The player, the server, QuickPlay and the phone apps are. Tempora's code is not public yet, and some plugins are closed source."},{"title":"Not from a recognised publisher yet","body":"Windows builds are signed with a self-signed certificate and macOS builds are not notarized, so both systems may warn you the first time you open WaveFlow."}]},"contact":{"title":"Contact","general":{"title":"Questions and feedback","body":"Write to the project. The address is the one the player gives for feedback."},"security":{"title":"Security","body":"Report a vulnerability privately through GitHub's security advisories, never in a public issue. Machines find the same in security.txt.","link":"Report a vulnerability"},"issues":{"title":"Bugs and ideas","body":"Open an issue on the app's repository: it is public, and you can follow the answer there.","link":"Open an issue"}}},"__i18n_root":"3b3390b6"}