Hi, I primarily export html5 web games, but occasionally make desktop builds as a second option.
I was doing this with my most recent game tonight, and when I ran it to test it, it started fine, but Norton has been aggressively asking me to block "Suspicious network activity" pinging over and over and over, long after the game was closed. (Multiple pings for each second the game was open, based on the timestamps) It's still going right now in fact. (I eventually hit "block always" and there were about 3 pages of blocks logged)
Is there a particular reason that an NW.JS build would do this? My game uses local storage to save a little bit of continue data, but otherwise shouldn't be writing or accessing the network that I'm aware of.
This certainly makes me wary of distributing a desktop build. I don't recall any previous games I've built doing this, though it has been over a year since I've made a desktop option.