plugins: PokeySynth (v0.9.0)

[RustoMCSpit]

name: PokeySynth
author: ivop
description: 'Atari Pokey LV2 synth plugin with FLTK '
type: instrument
license: gpl-2.0
tags:
  - 8bit
  - Synth
url: https://github.com/ivop/pokeysynth
audio: ''
image: https://github.com/ivop/pokeysynth/blob/master/images/pokeysynth.png?raw=true
date: '2025-04-20T00:00:00.000Z'
changes: First release.
files:
  - architectures:
      - x64
    contains:
      - lv2
    sha256: b4598ca2c075232e63c9837ad6c411a2acd154cb93eb2093c6a14fdef550c512
    systems:
      - type: linux
    size: 287956
    type: archive
    url: https://github.com/ivop/pokeysynth/releases/download/release-0.9.0/pokeysynth-0.9.0-linux64.tar.xz
  - architectures:
      - x64
    contains:
      - lv2
    sha256: e3c992c6f105a7a482df22e4930d6bcab8cd69e4d8575fcea02523756d9a9d56
    systems:
      - type: win
    size: 1157999
    type: archive
    url: https://github.com/ivop/pokeysynth/releases/download/release-0.9.0/pokeysynth-0.9.0-win64.zip

[RustoMCSpit]

@ivop your plugin has been submitted to OAS

[ivop]

Thanks! Note that the win64 package is also an archive and not an (automatic) installer.

[kmturley]

FYI this file format is not something we have support for yet: pokeysynth-0.9.0-linux64.tar.xz
https://github.com/open-audio-stack/open-audio-stack-registry/blob/main/specification.md#file-formats

.tar.gz
This format uses the gzip compression algorithm. Gzip is an older, widely supported, and generally faster compression method. While it offers decent compression, it typically results in larger file sizes compared to xz.

.tar.xz
This format uses the XZ compression algorithm, which leverages the LZMA/LZMA2 algorithm. XZ is a newer and more efficient compression method than gzip, providing significantly higher compression ratios and thus smaller archive sizes. However, this comes at the cost of slower compression times and higher memory usage during compression. Decompression times are generally comparable to gzip.

The library I am using does not support it:
isaacs/node-tar#393

Any reason to not use .tar.gz instead?

[kmturley]

VirusTotal detected a potential issue in the Windows file, can you take a look?
#158 (comment)

[RustoMCSpit]

Off-topic: I'm reading you "why LV2" section, you could've used nih-plug. It compiles both VST3 and CLAP, CLAP has plenty of Linux support

[ivop]

Re tar.xz, I will repackage it as a tar.gz and provide both.

As for Ikarus matching a generic trojan, I suspect it's a false positive. Maybe because of the HWND reparenting code? Windows binaries are built on a clean Windows 10 install with MSYS2.

[kmturley]

Yes could be a false positive. Ideally the Release is published via a GitHub Actions, then it is transparent to the user which source-code was used to compile the binary.
https://docs.github.com/en/actions

If you need help setting up, let me know. I have some examples for different plugin frameworks here:
https://github.com/studiorack/studiorack-workflows/tree/main/.github/workflows

[ivop]

New release, built by github actions: https://github.com/ivop/pokeysynth/releases/tag/release-0.9.1

VirusTotal Linux binaries
VirusTotal Windows binaries

The same "Google" sandboxes, but with a different report (SuspectCRC). I'm fairly sure it's the windows HWND reparenting code that trips this false positive. It's something that malware might do, too, but it's perfectly valid for LV2 plugins to reparent their window into the container supplied by the DAW/host.

Code is here

Edit: It's not the UI code, see below...

[RustoMCSpit]

out of curiosity, you could strip the code out and then virustest it again. if it passes after doing that then no worries.

[ivop]

It's not the UI DLL after all (UI DLL only), but it's the main DLL (main instrument DLL).

Rebuilt 0.9.1 in my own clean Win10 container and it suddenly doesn't report anything (clean win10 build).

The only difference between 0.9.0 and 0.9.1 is the version string. sigh

[kmturley]

It still shows the same issue in 0.9.1:

ivop/pokeysynth/0.9.1/pokeysynth-0.9.1-linux64.tar.gz
ivop/pokeysynth/0.9.1/pokeysynth-0.9.1-win64.zip

Maybe the hash of the file is matching a suspected file?

According to this thread, we could file a false positive report with VirusTotal:
java-native-access/jna#1627