A quick google bring up
this.
Some of the things that might cause an app to be flagged are:
- Adding, editing or deleting files
- Downloading files from a remote website or server
- Connecting to a remote website or server
- Transmitting data to a remote website or server
EDJP creates log files, configuration files, a bunch of JSON files to track things like seen journals, and a bunch of commander-specific data files to track activity
EDJP makes a bunch of API calls to do things like check latest version, grab latest ELW rarity data, check if ELWs already exist in the List of ELWs, a while bunch of EDSM calls, calls to spansh for neutron routing, and probably a bunch more I am forgetting.
That seems like such a ludicrously low bar for deciding whether to flag an app, but there you go. I have run an additional scan of my PC (with Windows Defender) and it finds nothing so it comes down to trust - do you trust Defender accurately scanned my PC, and do you trust me to not do Bad Things

. I do not publish the source code for EDJP so if you cannot emphatically say 'yes' to both of those then you should probably remove EDJP from your system. Don't worry, I won't be offended