New package: GRCSAC.NetVane version 1.2.0

[GRCSAC]

New package: GRCSAC.NetVane version 1.2.0

NetVane is a local network scanner and security monitor for Windows. It maps the devices on a network, fingerprints open ports, and matches discovered service versions against a bundled NVD and CISA-KEV database. It runs entirely on the local machine — no cloud service, no account, no agent.

• Homepage: https://netvane.doorvane.com
• Installer: Inno Setup, per-user (PrivilegesRequired=lowest), no UAC prompt
• Signed: Authenticode, CN=GRCSAC, via Microsoft Trusted Signing (valid, timestamped)

Checklist

• Contributor License Agreement — the repository owner will respond to the CLA bot.
• I have checked there are no other open pull requests for this package. manifests/g/GRCSAC/ does not exist upstream; this is a new publisher and a new package.
• Validated locally: winget validate --manifest ... → Manifest validation succeeded (winget v1.29.290).
• winget install --manifest — see the note below. The install path was tested, but not through this command.
• Conforms to the 1.6.0 schema.

On the install test

winget install --manifest requires winget settings --enable LocalManifestFiles, which needs administrator rights on the machine. Rather than change that setting, the install was verified through the path winget's inno handler actually takes:

NetVane-Setup-1.2.0.exe /VERYSILENT /SP- /SUPPRESSMSGBOXES /NORESTART

The installer URL and SHA256 in this manifest were verified independently against the published artifact — the live URL returns 200 with a content-length of 20,688,328 matching the file whose SHA256 is the one declared here — so the download-and-hash step is covered even though it was not exercised through winget install itself.

After the install, the ARP entry matched AppsAndFeaturesEntries exactly:

field	manifest	registry (HKCU)
DisplayName	NetVane 1.2.0	NetVane 1.2.0
DisplayVersion	1.2.0	1.2.0
Publisher	GRCSAC	GRCSAC
ProductCode	{7B2E9D4C-3A1F-4E58-9C2A-1D6B0F3E9A21}_is1	same

The application started and responded normally afterwards.

Notes on a couple of manifest choices

• AppsAndFeaturesEntries carries a versioned DisplayName. The installer's UninstallDisplayName is NetVane {version}, so the ARP name is not the package name and changes each release. Without this block winget cannot correlate an existing install and would keep offering an upgrade that is already applied.
• No UpgradeCode. This is an Inno installer, not MSI; ProductCode is Inno's {AppId}_is1 uninstall key, and AppId is fixed across versions.
• MinimumOSVersion: 10.0.10240.0 matches the publisher's stated requirement (Windows 10 or 11, 64-bit) rather than being set higher than the product actually supports.

Microsoft Reviewers: Open in CodeFlow

[GRCSAC]

@microsoft-github-policy-service agree company="GRCSAC LLC"

[microsoft-github-policy-service]

The check-in policies require a moderator to approve PRs from the community.

Our moderators are community volunteers, please be patient and allow them sufficient time to review your submission.

Template: msftbot/requiresApproval/moderator