The builds are code-signed but not notarized by Apple, so the first launch takes one extra step.

Opening the app the first time
Right-click the app and choose Open, then confirm. On macOS 15 and later you may instead need to allow it once in System Settings → Privacy & Security. After that it opens normally, forever.

Why not notarized
Notarization requires an Apple Developer Program membership, and that yearly cost would sit in the price of tools sold in small numbers. Instead, the SHA-256 of every DMG is published next to the download so you can check that the file you got is the file I published.

Verifying a download
In Terminal:

shasum -a 256 ~/Downloads/Finito-1.4.1.dmg

Compare the result with the checksum shown under the download button. If they match, the file is intact and untampered. If they do not, download it again and tell me.

Requirements
macOS 12 or later, Intel or Apple Silicon — one universal build for both.