Trust and safety

Download safely

The safest download flow is boring: confirm the domain, use the project-published asset URL, match your platform, and avoid anything that looks like an ad.

Check the source

Treat the source page as the first security check. A trustworthy flow starts from a project-controlled domain, keeps the filename consistent with your platform, and avoids bundled installers or ad-styled buttons.

Check the domain before trusting a file.
Prefer project-controlled asset URLs or release pages.
Match the file name and platform before opening anything.
Avoid ad-style buttons and bundled download managers.
Do not install extra tools that a release page did not require.

Verify the file

Before opening a downloaded file, compare the page domain, channel, version, operating system, and archive type. If any part does not match the release page, stop and re-check from the official source index.

Check the domain

Confirm the link resolves to the project-controlled release host or another official project page listed here.

Match the package

Match Windows, Linux, macOS, or Steam Deck guidance to the file name before opening the archive or AppImage.

Pause at system prompts

Treat operating-system warnings as a moment to verify the source, not as a prompt to click through automatically.

Trusted source pages

Download buttons open project-published asset URLs in a new tab and raw file links are marked as non-endorsed downloads. Editorial source citations keep normal link equity with safe new-tab attributes, so users and crawlers can understand which official pages support this guide.