Trust protocol
Audit the stack before you deploy
Source visibility, licensing boundaries, integrity verification, and security signal interpretation — what the project publishes versus what stays on the operator.
License matrix
GPL-3 in operator terms
Run, study, share, and modify Prism Launcher under GNU GPL version 3. Any redistributed build must preserve the same freedoms for downstream operators.
The license covers launcher software only. Minecraft assets, Mojang services, and third-party mod jars carry separate terms.
Project stance
Community ethics
Prism prioritizes user freedom and free redistributability — no Mojang endorsement claimed. Community mirrors must label origin, version, and checksums honestly.
Source tree
Public repository, tagged releases
Walk the repository layout before trusting a binary. Match release tags to the version string on the deployment console — 11.0.3 today.
├── launcher/
├── libraries/
├── cmake/
├── program_info/
└── LICENSE
Trust grid
Verification matrix
- Source
- Public GPL-3 repository — skilled operators can diff changes between release tags.
- Builds
- Route through official release channels and published SHA256 hashes, not unknown mirrors.
- Warnings
- SmartScreen and AV heuristics measure reputation. Treat them as signals to investigate, not final verdicts.
- Mods
- Third-party jars sit outside launcher licensing. Vet packs with the same rigor as any executable content.
- Accounts
- Microsoft login flows reach Mojang or Microsoft services. Prism caches session data locally per instance node.
- Scope
- This prismlauncher.app mirror describes the project. It does not replace legal counsel or platform policy documents.
Heuristic flags
What AV alerts usually mean
Game launchers download libraries, spawn Java, and write instance folders — behavior heuristic engines often score as suspicious. Quarantine after an official pull is commonly a false positive, but restore carefully and re-check SHA256. See diagnostics for AV routing steps.
Operator duty
What the project cannot carry
- Honor the Minecraft EULA and applicable local law.
- Route only mods and packs from sources you trust.
- Snapshot worlds before major pack or loader updates.
- Never expose account credentials in logs or screenshots.
Infrastructure
Partner credits
Organizations supporting Prism Launcher build infra, translations, and tooling. Logos credited once here.
Deploy from verified channels
Pull 11.0.3, run the integrity handshake, then keep instance nodes isolated.
Open deployment console