Ferrite

English | [简体中文](README.zh-CN.md)

[getferrite.dev](https://getferrite.dev) — Official website with downloads, features, and documentation

A fast, lightweight text editor for Markdown, JSON, YAML, and TOML files. Built with Rust and egui for a native, responsive experience.

Platform Note: Ferrite is developed and tested on Windows and Linux. macOS support is experimental. If you encounter issues, please report them (opens in a new tab).

Code Signing & Antivirus

Starting with v0.2.6.1, all Windows releases are digitally signed with a certificate from SignPath Foundation (opens in a new tab). This means:

• Windows SmartScreen recognizes the publisher — no more "Unknown publisher" warnings
• Antivirus false positives are significantly reduced thanks to the trusted code signature
• Integrity verification — you can verify that the binary hasn't been tampered with

Previous False Positives

Older unsigned builds may still trigger antivirus detections. This was caused by:

• Live Pipeline feature: Uses cmd.exe /C on Windows for shell commands, which ML-based detection can misidentify
• Rust compilation patterns: Rust binaries can trigger heuristic detections due to unique characteristics

We've addressed this through code signing, build profile adjustments (disabled symbol stripping, speed optimization), and reporting to Microsoft's Security Intelligence portal.

If You're Still Affected

If Windows Defender quarantines Ferrite:

• Upgrade: Download the latest signed release from GitHub Releases (opens in a new tab)
• Verify the signature: Right-click ferrite.exe → Properties → Digital Signatures → should show "SignPath Foundation"
• Check VirusTotal: Upload the file to VirusTotal (opens in a new tab) — signed builds should show clean results

Ferrite does NOT access passwords, browser data, or make unsolicited network connections. The only network access is the manual "Check for Updates" button (Settings → About), which contacts the GitHub Releases API when you click it. The application only accesses files you explicitly open.

macOS Installation & Gatekeeper

GitHub Release .dmg / .tar.gz builds are packaged as Ferrite.app but are not signed with an Apple Developer ID and are not notarized (CI limitation). Gatekeeper, especially on macOS 15.x (Sequoia / 15.6+), may block or warn on first launch—see GitHub #130 (opens in a new tab) and the workarounds below.