For not-for-profit entities that maintain open source tools, signing is impossible. To be able to get a signing cert you need to be "listed" and that can't be as an "autonomous workers collective" - you have to have a Lord whose identity can be verified. Not happening. "We don't have a Lord, we have a rotating leader whose decisions are ratified by a bi-weekly meeting with a simply majority...".
So there it has rested for years - we have to explain to users how to bypass Apple's ever more complex system or walls and moats just so they can run an inoffensive, free, CAD tool.
For not-for-profit entities that maintain open source tools, signing is impossible. To be able to get a signing cert you need to be "listed" and that can't be as an "autonomous workers collective" - you have to have a Lord whose identity can be verified. Not happening. "We don't have a Lord, we have a rotating leader whose decisions are ratified by a bi-weekly meeting with a simply majority...".
So there it has rested for years - we have to explain to users how to bypass Apple's ever more complex system or walls and moats just so they can run an inoffensive, free, CAD tool.
Sounds like jdeploy is a good fit for this scenario