Comment by throwaway4891a

I'm not using 1.0.0+ until it's codesigned and/or dmg gpg verifiable with a known-good signature.

Do not install untrusted, unverifiable apps is security 101.