I don't much believe in antivirus, as crooks can often find ways around them.
Traditionally, trust is based on knowing someones name and place of residence so you can call the cops on them and/or take matters in your own hands if they try any funny business. For anonymous people, an established reputation can also work.
In this case the repository is 7 years old. The owner states a full name (that if we are paranoid may or may not be the real one). A person with that name has published a scientific article about compression.
There are just way, way, way too many binaries out there for even a large fraction of them to be commented on.
I would definitely not rely on such comments for my security.
Anecdotally, I've scanned a ton of stuff through VT and very rarely saw any comments on them at all. It happens sometimes, but not a lot.
(And sorry I posted hard today, I had too much caffeine and my weed supply dried up -- if I didn't have those issues you'd see most of my comments be more like this one.)
Let's fix that then. Which operating system do you use?
I have mixed feelings. It can be good to spot check things, but I think things like checking the firewall for odd traffic are probably better uses of resources.
I'm not anonymous. Someone very purposefully tied my legal name to this nym when I signed the anti-Stallman petition.
I've had two accounts (Reddit, and Twitter) shut down very purposefully as retaliation for reporting extremely serious felonies.
There should be a rule that if I can prove someone's abusive gaslighting causes me to overshare, the person who purposefully distorted the truth is responsible for anything I purchase to return to a positive emotional state.
I am one of the strongest allies of open source on the planet.
It's not my fault if folks who use it for evil have conspired against me, then literally shot themselves when they realized I'll just go back to pounding espresso and posting twice as hard within less than 24 hours of their soul exiting their body.
Folks from the so called "free speech" community cannot handle truly free expression, they just want to hear their own talking points repeated.
Want code samples and a CV?