The first time you run the program, Windows opens a blue window. It does not say "this file is harmful"; it says "I don't recognise this publisher yet". The reason is simple: the file isn't digitally signed and it was published recently.
The only way this screen goes away is for Windows to see enough people run the program without trouble. Every new program goes through this stage. You don't have to take our word for it — below you can check the source and the file's fingerprint yourself.
LoL Duel now runs on the web. For security, browsers don't let a website read the game client on your computer directly. This small app is the bridge: it reads data from the client, hands it to the site, and writes the rune page the site computed back to the client. The site works fully without it — you just pick your champion and opponent by hand.
The bridge listens only on your own machine (127.0.0.1) and can't be reached from outside. Only allowed site addresses get a response, and writing runes requires the pairing key — a site in another tab can't write to your client.
We're not asking you to trust us; we're giving you things you can verify. The program's full source code is public, and the file you download is built from that code by GitHub's own servers, not by us.
Fingerprint (SHA-256) of the published ZIP. It must match the file you downloaded — you can check in PowerShell:
9124792d4296f814d18317519a67c6c0271393700b3d75034e7da5ddf11b9ea7
Get-FileHash .\LoLDuelYardimci.zip -Algorithm SHA256