Is the source code available for the plugin?

[DNez]

Hi,

Given the sensitive nature of information stored in KeePass databases it would be nice to be able to read the source code for this plugin. I tested the plugin out and it works well but I would be more comfortable using it with my real database if I knew what it was doing behind the scenes.

Do you have a source bundle available on SourceForge or somewhere else?

Thanks.

[Nick Smith]

Search your temp directory for GoogleSyncPlugin.csproj. If it's not there, clear the plugin cache in KeePass, then restart KeePass so it re-builds them, and search again.

Although an official release of the source would still be appreciated.

[Danyal]

Few people have asked me for this and I do plan to put the source code but not as a separate zip file.

I am planning to put it up on github so others can contribute to it as well but a couple of things I need to figure out first

1. I have used svn and cvs mostly and in process of learning git. Currently I haven't figured out a way to upload source with some of the initial history filtered out. Eventually I might just put it all up and will probably have to accept the scrutiny from good developers out there reviewing my code - In my defense, I wrote this in a couple of hours without much thought to standard practices that I follow at my job.
2. More importantly, I need to finish some of the items in todo list

As to your concern about sensitive information - I am sure from thousands of people who have downloaded this plugin, someone more technically inclined than myself (like Nick for example) would have come along and pointed out if the plugin was doing things that it shouldn't, even without the source code.

Hell he even found the source code! I must have compiled it in Debug mode, which I guess goes to prove the point the code and its developer has nothing to hide :). And I used to think I was a good .NET developer. I still have a lot to learn, have since switched to Java and MEAN stack but try to keep polishing my .NET skills with plugin like this.

Enough of the rant, sorry.

In the meanwhile, have a look-see at code from the temp directory - search for GoogleSyncPlugin* under C:\Users[username]\AppData\Local

[Nick Smith]

Hell he even found the source code! I must have compiled it in Debug mode,

Actually that's kinda intentional on KeePass2's part. PLGX files appear to just be non-standard file archives, with actual compilation taking place on the end users machine.
http://keepass.info/help/v2_dev/plg_index.html#plgx

Also, have this link, http://git-scm.com/book/en/Git-Tools-Rewriting-History

[Danyal]

Thanks for the links Nick.