Seems like a nice project. I'm still a little bit concerned with the VirusTotal result: https://www.virustotal.com/gui/file/81bbdffb92181a11692ec665...

That is to be expected by a project that contains encryption code, I'd say. Maybe their userbase isn’t big enough to report all false-positives and gain the reputation needed.

I'm concerned about your comment.

I envision a future when people can't deduct anything by themselves and will rely on automated, flawed systems.

The problem is not knowing why and how the systems are flawed, and therefore being unable to have nuanced and truly accurate decisions.

When I checked a few years back, even a ”hello world” Go application compiled for Windows was flagged as malware by a malware scanner that I investigated.

I’m not at a computer where I could try that hypothesis right now, but back then my conclusion after testing various executables was that any unsigned Go binary would be flagged as a malware.

Just as a rule of thumb, doesn't the fact that only a few unknown vendors flag it—and all of the major vendors do not—indicate something? It would suggest a false positive, wouldn't it?