The package isn't signed, so it's always going to show it as an unknown developer, which windows will say is untrustworthy. You should be able to just say run this program, but I would never discourage anyone from running it through a security scan.
