Regarding the recurring issue with the antivirus false positives, I've realized there's only one way to truly resolve it: code signing. Having a signed app would reduce the chances of those false positives, but getting a code signing certificate requires a paid subscription. As this is an open source project with zero budget, that is not practical (and frankly, feels like a scam).
I've recently learned about SignPath, who are willing to offer code signing certificates for open source projects (https://about.signpath.io/product/open-source). I've reached out and confirmed they're free, though the terms and conditions (at https://github.com/SignPath/Website-old/blob/v2/src/drafts/oss_policy.md) suggest we might need to make some logistics/organizational changes to the project to do this.
Regarding the recurring issue with the antivirus false positives, I've realized there's only one way to truly resolve it: code signing. Having a signed app would reduce the chances of those false positives, but getting a code signing certificate requires a paid subscription. As this is an open source project with zero budget, that is not practical (and frankly, feels like a scam).
I've recently learned about SignPath, who are willing to offer code signing certificates for open source projects (https://about.signpath.io/product/open-source). I've reached out and confirmed they're free, though the terms and conditions (at https://github.com/SignPath/Website-old/blob/v2/src/drafts/oss_policy.md) suggest we might need to make some logistics/organizational changes to the project to do this.