func asks for a firewall exception with publisher: Unknown

I just installed the Azure Functions CLI on my machine, and running it for the first time I got a request to add a firewall exception, which I might have been happy to do if the publisher were identified.

I've been told there's a problem with signing the CLI because of self-modifying code, but there's no way to verify that the tool I've got should be trusted with a firewall bypass:

• I downloaded it through npm (which has good cause for needing signing)
• func itself seems to give no indication of who's written or is responsible for it (there's no "Microsoft logo")
• Windows does not recognise it as signed
• Running it for the first time asks for firewall access...

My fundamental issue is that the func CLI needs some way to establish a chain of trust, because (1) an npm typo is a pretty easy exploit and there's currently no way to effectively differentiate the legitimate product from an alternative, and (2) there are going to be users with Windows setups that won't be able to just run an unsigned thing and func is in the dependency chain for a few things.

Environment Information

Azure Functions Core Tools (2.4.419 Commit hash: c9c1724d002bd90b2e6b41393915ea3a26bcf0ce)
Function Runtime Version: 2.0.12332.0

> [System.Environment]::OSVersion

Platform ServicePack Version      VersionString
-------- ----------- -------      -------------
 Win32NT             10.0.18845.0 Microsoft Windows NT 10.0.18845.0

The issue names Azure Functions Core Tools 2.4.419 and a Windows firewall prompt but no source file, test, or entry point. Start by locating the code that triggers the first-run firewall request; done means the CLI’s publisher can be verified and the trust concern is addressed.