With the integration not being part of the core program but community supported for most third-party game stores, this just becomes another game store to install.

The promised integration was the main draw for me, as GOG games do not require Galaxy to run.

I agree this either needs to be fully backed by GOG as part of the Galaxy software and support provided through GOG or they need to create official integration.

As for the program itself, I will test it but do not see anything wrong at the moment.

I got the feeling GOG was behind the community integrations as they are listed by default under the settings form. There will be implications if one of these become a rogue integration that hijacks any of your accounts.

Acting after something bad has happened is already too late no matter what they do about it! The damage has already happened and you're in damage-control mode from there on! That's the whole point here: installing stuff directly from Github without GOG explicitly verifying the stuff before-hand is a major vulnerability and it exposes everyone installing community-integrations to possible malicious code.

If they did come out and specifically stated that yes, they do only install verified by themselves, then fine, but as long as they don't explicitly state that the community-integrations are and will remain a major vulnerability. I, at least, have not seen any such statement from them and thus I will continue to recommend people to steer away.

So basically the best thing to do is to wait for GOG to add the integrations to the app and ignore the community ones you can add manually. Which means GOG will have to step up and make those integrations as soon as possible, since there's still a lot missing

Why GOG has to be responsable of third party work?

GOG is only providing a way third party people can add other games to their tool. For example, Oculus games, Switch games, iOS or Android games, or even platforms I'm not aware of. Not all payable on PC, obviously, but with the option to be listed in only one place. Some of you will find it useless. To me it is an awesome way to have a list of all my games in one place.

The API is a logic way to create a standard to manage these games, to give the real possibility to have as many game platforms as possible listed in one unique place. This is their promise and the given all what is being need, for this.

But they have no obligation nor responsability versus what is being done with their API. The responsibles are the ones who develop these integrations. If you take a Toyota LandCruiser and modify it to make an airplane, Toyota is not responsible at all of your wheredoings.

You need to be happy they gave you that option, instead of feeling bad for the lack of responsibility GOG obviously have. Cause obviously, they are not responsible.

All your ramblings about the API are irrelevant, no one was complaining about it.

Because they are the ones distributing that code. They are the ones who have very specifically included the buttons you can just click on to have these 3rd-party integrations installed and there is no mention of any kind that the code those buttons would install is unchecked and unverified.

If Toyota specifically included the buttons on the dashboard to turn that car into an airplane, yes, they most definitely would be legally responsible for it.

Oh, but you can!

You can change the wheels, the chairs, the radio, you can add elements that are not "Toyota official" but that are compatible. You can change the motor and even the bodywork! And if you search internet you will find a failure attempt that happened with a Ford. And Ford was not responsible of it.

Office allow integrations and office documents allow scripts. Microsoft is not responsible of any non official integration.

Microsoft is not responsible of any malware that can harm you through their operative system. Neither Google with his Android neither Apple with their iOS. As much they can make it hard to you to install uncontrolled software, but they make it not impossible.

IRC -yes, old IRC- is not responsible of the scripts developed to work with that chat system.

Elder Scrolls is not responsible of the mods in Oblivion or Skyrim.

The people who develop this Forum is not responsible of the use GOG and other people or companies do with it.

My mother is not responsible of what I do - I have 41 years, I'm fully "developed" -

Etc.

They don't need to be responsible. Because they are not responsible of whatever other people do.

None of that is relevant to what I said.

Um, you clearly are unaware that all three are actually taking some responsibility by checking the software distributed by their respective app-stores and trying to actively prevent anyone from spreading malware that way.

ir is! it is a valid example of how things work in real life.

you're unaware that software can be downloaded out their app stores? on ios is a little harder: you need to install the app as a developer - it means compilation and everything but it is the same thing as this, being scripts on python, that are readable -, but it is possible in both cases.

And obviously gog is not providing an "store" for it. Will he do it in the future? maybe. But they don't need it. If they do it in their future it will be cause they decide it, but it is not a need for them, for sure.

That's what the GOG Galaxy is! Jesus Christ, how can this concept be so difficult to understand? No one is complaining about the API or that you can go and download random stuff from Github or anything and no one said GOG should take responsibility that you go and install on your own!

The point is that GOG should verify the content GOG is distributing through Galaxy!

Either you have some fucking serious reading-comprehension issues or you're deliberately being obtuse, but it's pointless to keep arguing with you, since you keep on jammering on about completely different things!

according to this table, community plugins separated from no-name contributor "Friends of Galaxy"

https://github.com/Mixaill/awesome-gog-galaxy

if both are the community then why they are separated? it seems like gog plays dirty tricks and soon we will see galaxy 2.0 to be maintained by "community" or "friends". why you keep asking gog to take responsibility for their own product? if they went extra mile to create imaginary "friends" with sterile github accounts they won't support anything, that was the plan to start with.
I refuse to use this shady app for that very reason.

Wait, if the Friends group is actually GOG themselves (probably just working unofficially so that they avoid trouble with those other platforms getting integrated into GOG Galaxy), that would make the Friends of Galaxy integrations trust worthy. Because it'd be GOG the one doing them and integrating them on Galaxy 2.0, hence why they are already included on Galaxy.
Besides, people can always check the code up for themselves since they're on Github, if anything, that consolidates that they are not trying to do anything shady with your account info. If the Friends of Galaxy's github pages were hidden or didn't exist (the only mention of this group being in Galaxy 2.0, for example), now that would be a cause for concern.

why? because they hide behind no-name github account? that makes galaxy integrations a fraud. can't you understand that they planned to create these plugins under false account of "friends" to avoid responsibility for its usage by user? how it can be trustworthy?

If it was to avoid responsibility, they wouldn't be public and you wouldn't be able to check the code yourself... anybody with a github account can read every single line of code and KNOW, for certain, how the app works. And there are a lot of people in the community into coding (that's what has driven other integrations such as Twitch, Minecraft, etc.).
If there was something shady, the community would have noticed, calm down with that.

The act alone of having the code ready to see means that there are no ill intentions.
The fact that you cannot code (nor me for that matter, I'm a noobie when it comes to that even if I have made apps before), doesn't mean that the information isn't available to everybody. It's like not trusting a full on EULA because it's in a language you do not understand yourself.

Besides, GOG has a reputation to keep specially with Cyberpunk coming out, that's why they're doing it this way to go under the radar of the other platforms, not the users, in order to deliver these integrations to the users and gain users for when Cyberpunk drops with a feature no other platform is able to provide officially.

They could have made the code private even if the account was on github, and the only information we'd have about the Friends integrations would be the little window in Galaxy, yet they didn't do that.