The last couple of versions I tried to download gave TROJAN warnings from MS Defender. I had created an issue on the project notifying the developer, and I understood he was changing things to not give a "false positive". Perhaps GitLab didn't think they were false positives?