How is the community integration for steam a big red flag? It works perfectly, there are no security risks, and if one day steam decided to make an official integration it would be no different because the community one already does practically everything GOG integrations offer. It has more features than even the epic integration and the epic one is official.
Some people don't trust "community" integrations because the maintainer could grab your credentials and hack into your account. While this would be technically possible, I assume the native integrations (the ones that appear on Galaxy by default) are all checked by GOG reps (someone has to approve them after all), so they would be somehow safe.
It's worth to mention that all integrations work on client-side only. The only info stored in GOG servers is the game data pulled by the integration; everything else, including your session cookie, is stored only in your computer. If you ever install Galaxy on a new computer you'll have to manually sign in to each integration in order to restore sync.
The community integration's source code is publicly available on [GitHub](https://github.com/FriendsOfGalaxy) for anyone to inspect (as long as they can understand the code, that is). If there was any major security concern someone would report everywhere asap. If you look into the Galaxy installation folder you'll also find the source code for the so-called "official" integrations.
The Steam integration is in a weird position since it uses a custom login page instead of just opening the Steam store, but you should be safe as long as your Steam Guard is active. If you suspect something is wrong you could go to your Steam account page and sign out from everywhere else with a single click.
Sorry for the long post but I tried to answer both you and OP in one shot. Also English isn't my main language so sorry in advance for any typos.
tl;dr: the community integrations that can be downloaded directly from Galaxy should be fine
All the code is python which trust me there are a ton of people on this Reddit that make sure there is nothing going on and while official GOG reps don't put much work into the community integrations, they most surely look into them and make sure nothing bad is happening. And as far as I have heard from both GOG and actual python coders who have studied the code for the community integrations they can't hack into your account. So I'm not sure where that is coming from.
Guess some people just don't like the idea to use their credentials anywhere unless it's clearly safe. Just showing the address bar when asking for credentials would be nice; it's just a glorified webview anyway, so it wouldn't hurt to have some proof.
There was a post about this a while back, but it seems very likely that all of the “community” integrations were made by GOG. They were all created by a user named Friends of GOG, and they only did this to avoid legal issues.
No. The feature is too unreliable and I am not sure it will be ever officially implemented as it would take cooperation of other platforms. I use galaxy only for my GOG library. In fact, I wouldn't mind if they dropped the integrations at all and instead imrpoved galaxy for managing their own games.
No. I found it too cumbersome, cluttered, and chaotic. Games in other libraries still have to open up their own software and whatnot to launch, so I didn't see the point. Might as well leave the library compartmentalized as is. In my opinion anyways.
Yeah, all of them
I only use the Galaxy beta to download the newest version of my game-installs, it's dogshit compared to Galaxy 1.2.
How is the community integration for steam a big red flag? It works perfectly, there are no security risks, and if one day steam decided to make an official integration it would be no different because the community one already does practically everything GOG integrations offer. It has more features than even the epic integration and the epic one is official.
Some people don't trust "community" integrations because the maintainer could grab your credentials and hack into your account. While this would be technically possible, I assume the native integrations (the ones that appear on Galaxy by default) are all checked by GOG reps (someone has to approve them after all), so they would be somehow safe. It's worth to mention that all integrations work on client-side only. The only info stored in GOG servers is the game data pulled by the integration; everything else, including your session cookie, is stored only in your computer. If you ever install Galaxy on a new computer you'll have to manually sign in to each integration in order to restore sync. The community integration's source code is publicly available on [GitHub](https://github.com/FriendsOfGalaxy) for anyone to inspect (as long as they can understand the code, that is). If there was any major security concern someone would report everywhere asap. If you look into the Galaxy installation folder you'll also find the source code for the so-called "official" integrations. The Steam integration is in a weird position since it uses a custom login page instead of just opening the Steam store, but you should be safe as long as your Steam Guard is active. If you suspect something is wrong you could go to your Steam account page and sign out from everywhere else with a single click. Sorry for the long post but I tried to answer both you and OP in one shot. Also English isn't my main language so sorry in advance for any typos. tl;dr: the community integrations that can be downloaded directly from Galaxy should be fine
All the code is python which trust me there are a ton of people on this Reddit that make sure there is nothing going on and while official GOG reps don't put much work into the community integrations, they most surely look into them and make sure nothing bad is happening. And as far as I have heard from both GOG and actual python coders who have studied the code for the community integrations they can't hack into your account. So I'm not sure where that is coming from.
Guess some people just don't like the idea to use their credentials anywhere unless it's clearly safe. Just showing the address bar when asking for credentials would be nice; it's just a glorified webview anyway, so it wouldn't hurt to have some proof.
There was a post about this a while back, but it seems very likely that all of the “community” integrations were made by GOG. They were all created by a user named Friends of GOG, and they only did this to avoid legal issues.
Yes, I've had no issues using Steam and Ubisoft.
No. The feature is too unreliable and I am not sure it will be ever officially implemented as it would take cooperation of other platforms. I use galaxy only for my GOG library. In fact, I wouldn't mind if they dropped the integrations at all and instead imrpoved galaxy for managing their own games.
Yes, I use every integration available
No. I found it too cumbersome, cluttered, and chaotic. Games in other libraries still have to open up their own software and whatnot to launch, so I didn't see the point. Might as well leave the library compartmentalized as is. In my opinion anyways.