Last updated: 11 October 2026
Status
Our releases are not code-signed yet, so Windows may show an “unknown publisher” warning. Verify downloads with the SHA256SUMS.txt file attached to each release. We are working on obtaining a code signing certificate; this page will name the certificate provider when releases are signed.
How releases are built
- Every release is built from the public source code in the GitHub repository by GitHub Actions (
.github/workflows/release.yml), from a version tag. No release binary is built on a personal computer. - The workflow builds the 64-bit and 32-bit text service and the companion program, runs all tests, and compiles the installer.
- Only this project's own binaries are signed. The product name in every signed file is “July Bangla Keyboard”.
Team roles
| Role | Members |
|---|---|
| Committers and reviewers | Mahbubul Alam (@promahbubul) |
| Approvers | Mahbubul Alam (@promahbubul) |
- Changes from people outside the team arrive as pull requests and are reviewed by a team member before they are merged.
- Every signing request is approved manually by an approver.
- Team members must use multi-factor authentication for the source repository and for the signing service.
Privacy policy
This program will not transfer any information to other networked systems. It has no network access, telemetry, analytics or advertising. See the privacy policy.
Installing and removing
The installer adds a Windows keyboard (text service) and, if you choose, a start-up entry for the status bar. It asks for administrator permission and lists these choices before installing. Windows Settings → Apps → “July Bangla Keyboard” → Uninstall removes everything it installed.
Reporting a problem
If you believe a signed file from this project is not what it claims to be, report it privately through a security advisory.