itch.io

cool idea, i dig it

unless devs pay about $300, any exe file ran on windows will have a window defender pop up saying it might be malicious. however, if you're paranoid, you could always check it on a site like virustotal.com. if there's one or two detections, it's usually fine and is a false-positive.