You can read my answer here.
You can create a specific app password or you can (although insecure and at your own risk) enable the insecure app access in your Google account settings.
Spotify and Deezer only provide APIs to fetch metadatas but not the actual musics. To play these tracks, Harmony tries to find the closest match on YouTube, but may be wrong sometimes.
There is no official API for Google Play Music so the only way to login is by entering your credentials. The Hype Machine plugin doesn't yet support OAuth login. However, both your Google and Hype Machine credentials aren't stored anywhere and are only used to obtain a token on the first login.
There seems to be some issues with the asar packaging Harmony is using. See this issue.
I'm Vincent, 17yo french, working on Harmony since 2016 and some other stuff while studying. You can follow me on Twitter @vincelwt :)
Harmony is built with Electron and vanilla JS. It allows me to code faster than using traditional languages.
No. It probably never will (I find auto updates really annoying). It will alert you when a new version is available though.
Yes. Well, actually pretty soon. I'm still cleaning things up but will open-source the current plugins and write a documentation.