Spotify-downloader: gyan.dev variant pegged as trojan by virustotal

[thracyturnix]

Might be an idea to revise the link until the issue is resolved:

Current status
warning
This site is unsafe
The site https://www.gyan.dev/ffmpeg/builds/packages/ffmpeg-4.3.1-2020-11-02-full_build.7z contains harmful content, including pages that:

Install unwanted or malicious software on visitors’ computers
The site https://www.gyan.dev/ffmpeg/builds/packages/ffmpeg-4.3.1-2020-11-02-full_build.7z contains pages that:

Distribute uncommon downloads
Are you the site owner? Register your site in the Google Search Console to get a detailed report of the security issues impacting your website.

[issue-label-bot[bot]]

Issue-Label Bot is automatically applying the label feature_request to this issue, with a confidence of 0.86. Please mark this comment with :thumbsup: or :thumbsdown: to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

[MikhailZex]

Cloud you replace the windows build link with the other one from their home page and open a PR?

[GyanD]

You can link directly to the Github mirror till Google resolves this: https://github.com/GyanD/codexffmpeg/releases/download/4.3.1-2020-11-02/ffmpeg-4.3.1-2020-11-02-full_build.7z

[MikhailZex]

Hey @GyanD , can I ping ya with the ffmpeg issues we run into?

[GyanD]

Sure.

[GyanD]

There should be no flagging of the downloads anymore. Can you confirm?

[MikhailZex]

@spotDL/intrested-contributors
@spotDL/contributors

[thracyturnix]

These pages do not exist. ?

Jim

On Sun, 15 Nov 2020 at 21:26, Michael George [e-mail]
wrote:

@spotDL/intrested-contributors
https://github.com/orgs/spotDL/teams/intrested-contributors
@spotDL/contributors https://github.com/orgs/spotDL/teams/contributors

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/spotDL/spotify-downloader/issues/969#issuecomment-727551061,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ARTB4BL32CDWWP3TAKGUQCLSP6XVRANCNFSM4TMDDXWA
.

[MikhailZex]

These pages do not exist. ?

Meaning?

[thracyturnix]

meaning the URLs linked here:

@spotDL/intrested-contributors
https://github.com/orgs/spotDL/teams/intrested-contributors
@spotDL/contributors https://github.com/orgs/spotDL/teams/contributors

do not exist

On Tue, 17 Nov 2020 at 01:02, Michael George [e-mail]
wrote:

These pages do not exist. ?

Meaning?

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/spotDL/spotify-downloader/issues/969#issuecomment-728099530,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ARTB4BMMHROD5X5WDK2QHJDSQEZYHANCNFSM4TMDDXWA
.

[MikhailZex]

@thracyturnix those are visible only to members of spotDL.

[loftwah]

Should we compile FFMPEG from source as part of our build process? This would prevent any issue in future, plus remove the requirement for binary files.

[phcreery]

Or we just link only the official FFmpeg "Central Release Page" site since it has directions for installation for each OS.
IMO this is the best option since it means we won't have to duplicate _&_ maintain the links _&_ instructions that their website already does. Plus, it has packages for separate Linux distributions.