QuiNVarium Wallet
Open source and release verification
Use official source and release records without assuming that any repository or binary is authentic.
Open source improves inspectability, but the label alone does not prove that a downloaded application is official, current or built from a particular revision.
Verify the source#
- Start from Official downloads, not a search result or message.
- Follow only the repository link published in the official-links registry.
- Match the release tag or commit to the version named by the release record.
- Read the repository's license and security policy.
Verify the application#
For a store build, confirm the publisher or developer organization on the store listing. For a direct desktop build, use the platform's signature and publisher details. When checksums or signatures are published for a release, compare them before opening the file.
Get the app
What a public repository does not prove by itself#
- that an unrelated store listing belongs to QNV;
- that a fork or mirror is maintained by QNV;
- that every server-side service is part of the same repository;
- that a locally modified build receives official support;
- that source availability removes blockchain, market or third-party risk.
Licenses#
QuiNVarium Wallet includes open-source software:
- Wallet core and service components — MIT License.
- iOS application — GNU General Public License v3.0.
- Third-party libraries — under the licenses stated in each component.
Full license texts: Open-source notices.
Security researchers should use Report a vulnerability instead of publishing an exploitable issue before it can be assessed.