LedFx reported as a virus/malware by Windows Defender about ledfx HOT 1 OPEN

You are correct, this is due to using pyinstaller to freeze and distribute so that people don't need the (complex) build environment to use pip.

We don't have the funds for a code signing certificate (nor the expertise to implement it to be honest).

Hopefully if enough people report it as a false positive the file signature will get updated, but other than whitelisting it with Windows Defender we're a bit stuck.

I can hand-on-heart assure you (and anyone else) that there is nothing sinister within the binary - the entire build process is viewable via our actions - https://github.com/LedFx/LedFx/blob/main/.github/workflows/test-build-binaries.yml

The associated .spec files for pyinstaller to ingest and use for windows binaries is https://github.com/LedFx/LedFx/blob/main/windows-binary.spec

from ledfx.