UMLGraph VS SignMyCode

• Automated Diagrams
  UMLGraph allows for the automatic generation of UML diagrams directly from Java source code, which can save a significant amount of time and reduce the likelihood of errors introduced by manual diagram creation.
• Integration with Javadoc
  UMLGraph integrates seamlessly with Javadoc, enabling the generation of both class documentation and UML diagrams in a unified process.
• Text-Based Configuration
  Diagrams are configured using textual annotations in the source code, which makes version control easier and allows developers to maintain diagrams alongside the source code.
• Extensible and Customizable
  The tool is highly customizable, allowing users to define the appearance and layout of UML diagrams to meet specific project needs.
• Open Source
  Being an open-source tool, UMLGraph is freely available for use and modification, promoting community involvement and continual improvement.

Possible disadvantages

• Learning Curve
  There is a learning curve associated with mastering the use of UMLGraph and its annotations, which may create an initial barrier to entry for new users.
• Java-Centric
  UMLGraph is designed specifically for Java, which limits its utility for projects that are developed in other programming languages.
• Limited Dynamic Diagram Support
  The tool primarily focuses on static diagrams and may have limited functionality for generating dynamic diagrams such as sequence or activity diagrams.
• Dependence on Graphviz
  UMLGraph relies on Graphviz for rendering diagrams, which introduces an additional dependency that must be installed and maintained.
• Manual Configuration for Complex Diagrams
  For complex diagrams, significant manual configuration may be required, which can negate some of the time-saving benefits.

• Wide Certificate Authority Support
  SignMyCode supports code signing certificates from major Certificate Authorities like Sectigo (Comodo), DigiCert, and Certum, giving users flexibility in choosing their preferred CA and certificate type.
• Affordable Pricing
  SignMyCode offers competitive pricing on code signing certificates, often at discounted rates compared to purchasing directly from Certificate Authorities, making it a cost-effective option for developers and organizations.
• Support for Multiple Platforms
  The service supports code signing for various platforms and file types including Microsoft Authenticode, Java, Adobe AIR, macOS, and more, allowing developers to sign code across different ecosystems.
• EV Code Signing Available
  SignMyCode offers Extended Validation (EV) code signing certificates which provide enhanced trust, immediate SmartScreen reputation with Microsoft, and stronger security assurances compared to standard code signing certificates.
• Easy Purchase and Renewal Process
  The platform provides a straightforward purchasing process with clear guidance on certificate selection, validation requirements, and renewal options, simplifying the often complex certificate acquisition workflow.

Possible disadvantages

• Reseller, Not a Certificate Authority
  SignMyCode is a reseller rather than a direct Certificate Authority, meaning customers are adding a middleman which could potentially complicate support issues or certificate management compared to buying directly from the CA.
• Validation Process Can Be Slow
  Like most code signing certificate providers, the validation process — especially for EV certificates — can take several days to complete, which may delay developers who need to sign code urgently.
• Limited Advanced Tooling
  SignMyCode primarily focuses on selling certificates rather than providing advanced signing tools, CI/CD integrations, or automated signing workflows that some competing platforms offer as part of their service.
• Support Availability Concerns
  Some users have reported that customer support response times can vary, and the level of technical assistance may not always match what is available directly from larger Certificate Authorities.
• Less Brand Recognition
  Compared to well-established providers like DigiCert or GlobalSign, SignMyCode has less brand recognition and a smaller track record, which may make some enterprise customers hesitant to use the service.

Tracking UMLGraph since Mar 2021.

• EV Code Signing

  I used https://signmycode.com/ they were very helpful. Source: over 3 years ago