@ZestyTS &
@Narrgel, I'm still confident I am not
required to share any of my code since it's not a part of UWUVCI, but just to put your concerns to rest I decided to
voluntarily share what I do have.
Like I said, I don't have\need any UWUVCI source locally or otherwise and to prove it I've made my build script\workflow public. Now anyone can see how I'm building\patching it
here. So at least things are clean on
my side now
I hope no one abuses this, because as I warned in our
github convo, someone else might not be as nice and could easily fork my repo and re-enable compatibility and issue reporting and send nonsense and/or adult images to your github from custom builds that don't have static fingerprints... making it impossible for you to blacklist them. So yeah, don't say I didn't warn you, but you asked for it sooo
I’m going to address the remaining claims clearly, and then I’m done with this publicly.
3.200.7 was a revert to 3.200.5. It did not introduce new functionality. It was built during a period when I did not have normal GitHub access, which I explained at the time. There was no hidden branch and no attempt to withhold modified source. Calling it a closed-source release is simply not accurate.
I did not write CNUSPacker. It is a public NuGet dependency. I do not maintain a private fork of it, and there are no proprietary modifications embedded in it. If there was a version mismatch at any point, that is a dependency alignment issue, not concealed code. Implying otherwise is misleading.
The Mac wrapper is not a separate proprietary project. It uses Sikaguir (Modern) or Kegworks (Legacy) to package the existing Windows executable with configuration. If you download the app and view the package contents, everything is there, including how it is configured. There is no additional license logic, no hidden features, and no closed modifications. It is not in the repository due to size and directory structure limitations, not because it contains undisclosed logic.
@ZestyTS &
@Narrgel, I'm still confident I am not
required to share any of my code since it's not a part of UWUVCI, but just to put your concerns to rest I decided to
voluntarily share what I do have.
Like I said, I don't have\need any UWUVCI source locally or otherwise and to prove it I've made my build script\workflow public. Now anyone can see how I'm building\patching it
here. So at least things are clean on
my side now
I hope no one abuses this, because as I warned in our
github convo, someone else might not be as nice and could easily fork my repo and re-enable compatibility and issue reporting and send nonsense and/or adult images to your github from custom builds that don't have static fingerprints... making it impossible for you to blacklist them. So yeah, don't say I didn't warn you, but you asked for it sooo
Everything required to build my release distribution is public, including the build script. There are no hidden patches applied during compilation. There are no private CI steps modifying the binary. The only non-public element is credential injection for a scoped service account used for repository operations. Those credentials are not in public source for obvious security reasons and are not part of the distributed binary.
Publishing your workflow does not grant anyone credentials to push to UWUVCI’s repositories. The public source does not contain usable tokens. GitHub secrets do not propagate to forks. Re-enabling compatibility or reporting in a fork does not grant authentication rights. The suggestion that making your workflow public somehow enables people to flood NicoAICP's repository is technically incorrect. Anyone attempting to target the repository would need valid credentials. That has nothing to do with workflow visibility.
For clarity, your workflow is not simply compiling upstream source. It programmatically patches behavior before compilation, including:
- Forcing official verification to return true and removing the unofficial build banner
- Disabling blacklist checks and altering device fingerprint logic
- Disabling update checks
- Removing compatibility submission, feedback, and reporting features
- Disabling tutorial and local install guard logic
Those are functional changes that alter runtime safeguards and verification behavior. That is a behavioral fork, not a neutral rebuild. Forking and modifying is part of open source. However, a fork that disables verification and safeguards must be clearly represented as a modified fork, not presented in a way that suggests it is official or endorsed. Users should be able to distinguish between upstream releases and patched variants.
At this point:
- Your workflow is public.
- My build script is public.
- Dependencies are public.
- No credentials are embedded in public code.
Any remaining disagreement is about interpretation, not concealment. I’m not continuing this further.