Is SciDAVis Safe to Download and Install?

Short answer: yes — as long as you download it from the right places. This page explains what “right places” means, why Windows flags the installer, and what you can and cannot verify. Nothing here asks you to take our word for anything you can check yourself.

Does SciDAVis contain viruses or malware?

SciDAVis is open-source software: its entire source code is published on GitHub (github.com/SciDAVis/scidavis), where anyone can read, audit, and build it. There is no bundled adware, no toolbar, no “optional offers” in the official installers — those tricks are a hallmark of shady download sites, not of this project. In years of distribution through SourceForge and community sites, no malware has ever been reported in an official SciDAVis build.

The real risk is not SciDAVis itself but where you get it. Download only from these sources:

• The official SourceForge project page (sourceforge.net/projects/scidavis)
• The upstream GitHub repository above
• This site’s download page, which links to those official sources

Avoid random “free download” mirrors you find through search ads — repackaged installers from third-party sites are the classic way malware gets attached to legitimate open-source software.

Why does Windows say “Unknown publisher”?

When you run the Windows installer, SmartScreen may warn that the publisher is unknown and ask whether you really want to run it. This is expected, and it does not mean the file is malicious.

Here’s why: Windows verifies software identity through code-signing certificates, and the trustworthy kind (EV certificates) cost a few hundred dollars every year. SciDAVis is maintained by volunteers with no commercial budget, so its installers are simply not signed — Windows is telling you “I can’t confirm who made this,” not “this is dangerous.”

To install anyway: on the SmartScreen warning, click More info, then Run anyway. If Windows Defender itself flags the file (distinct from SmartScreen), do not override it — re-download from one of the sources above and scan the file first (see below).

What about macOS Gatekeeper?

Same story on the Mac side: the app is not notarized by Apple, so Gatekeeper may refuse to open it on first launch. Right-click (or Control-click) the SciDAVis app and choose Open, then confirm — or open System Settings → Privacy & Security and click Open Anyway next to the SciDAVis entry. This is a one-time step.

Can I verify the download with a checksum?

Honestly: not against an official hash. We checked the public SourceForge file metadata for the current SciDAVis installers and could not find officially published SHA-256 checksums to compare against. Some projects publish them; this one currently does not, so any hash you see quoted on a forum is unverifiable — treat it accordingly.

What you can do instead:

• Upload the installer to VirusTotal before running it — it scans the file with dozens of antivirus engines and takes a minute.
• Download from the same source twice, or check the file size against the download page — a corrupted or tampered file rarely matches.
• Keep your antivirus definitions current, as you should anyway.

Do I need to disable my antivirus?

No — and you should be suspicious of any download guide that tells you to. SciDAVis installs cleanly with antivirus software running. The SmartScreen “Unknown publisher” prompt and a real antivirus detection are two different things: the first is about identity, the second is about content. Only ever override the first. If your antivirus quarantines the installer itself, stop, re-download from an official source, and scan the new file with VirusTotal before doing anything else.

You can check the signature yourself

On Windows, right-click the installer → Properties → Digital Signatures tab. You will find no signature listed — which is exactly what this page described, and it is the honest state of a volunteer-built installer. If a copy of “SciDAVis” you downloaded does show a signature from some company you have never heard of, that is a red flag: the official builds are unsigned, so a signed copy came from someone else’s repackaging. Delete it and download from the official sources.

The bottom line

SciDAVis is safe software from an open, auditable project — the warnings you see are about unsigned installers from a volunteer project, not about detected threats. Download from SourceForge, GitHub, or this site’s download page, scan the installer if you want extra peace of mind, and you’ll be fine.