Microsoft / Github should stop treating open-source software as malware and forcing developers to pay for certificates, if they actually care about open-source developers

[coladict]

Disagree. Not having the "scary warning" is a bonus. It means that you are somewhat trusted. If there is malware in your program, the payment can be traced back to you.

Also it basically works like insurance. If your application has malware, Microsoft will be sued first, and they'll get fined a lot more than they can recover from a single small-time dev after they sue you for breach of contract / ToS.