Code signing certs are unfortunately expensive
$0 at SignPath. Quite a few OSS projects use it.
$700+ at Sectigo for two years
Something of Notepad++ size might think about it now
$0 at SignPath. Quite a few OSS projects use it.