Lobstack is code-signed
From 0.11.10 the Windows installer is signed and the Mac app is notarized. The Mac warning is gone; Windows may ask until the certificate earns reputation.
Until now, the first thing Lobstack showed a new user was a warning. Windows said it had protected your PC from an unknown publisher, and macOS said it could not verify the app. Both were saying the same thing: the installer had no publisher certificate.
From 0.11.10 it does.
Windows
The installer, the app and the uninstaller are signed through Microsoft's Azure Artifact Signing. Windows names the publisher, Brandon Crenshaw, verified by Microsoft, instead of "Unknown publisher".
Correction, 10 October. This post first said there is no More info → Run anyway step on Windows any more. That was wrong. Microsoft SmartScreen judges a download by its reputation as well as its signature, and a new certificate starts with none: Microsoft says it "can take several weeks and hundreds of clean installs". Until then SmartScreen may still show "Windows protected your PC". Choose More info: it names the publisher, Brandon Crenshaw, and Run anyway installs it. No certificate skips this, EV included.
macOS
The app and the disk image are signed with an Apple Developer ID and notarized by Apple. It opens like any other app you download: macOS asks once whether to open it, and there is no trip to Privacy & Security to press Open Anyway.
What signing does and doesn't mean
A signature proves who published a file and that it hasn't changed since. It says nothing about what the app does once it runs, which is why every step an agent takes that changes something still waits for your approval.
Already installed?
Your copy updates itself to 0.11.10 as usual. Under Settings › Updates, the line that said "This build is not code-signed" is gone on Windows and macOS. Linux packages are unchanged; nothing on Linux asked.
Get it at /download.