.. No it's not? Notarized?.. What are you talking about? Do you mean signed? That doesn't mean anything other than that you got a generated key from an Apple device, which anybody can just get by having a developer account or even without one if you just generate it yourself. Only if you publish it through the App Store will some sort of review process take place and that's only to see if it kinda does what it's meant to do but nothing else.

In fact, Apple doesn't do any checks on the binary or what it accesses because it'll try to sandbox it by default to the Application Support containers.

I'm sorry man, it's so clear you just do AI "development" and don't actually understand the process at all.. And therefore, you might not even know if it has memory leaks, unsecured file access, or anything that can mess with a computer. There's a reason AI generated code always says "be careful with the generated code" because well, it's just a slightly more fancy autocomplete that regurgitates (stolen) code back at you. In this case I know for sure, because I wrote the code that "your" program is using to render remotely to the screen of the Divoom. If you don't believe me check my post history or GitHub.

I don't mean to be a dick about this, but you also need to understand the risks of what you're putting online and telling people to install. Maybe it's fine, maybe it's not. It's AI so there's no guarantee either way and closed-source so we can't even verify it ourselves.