First of all thank you for providing this excellent software to the community, millions of users have benefitted from your work.
Over the years WinSCP has developed into a widely respected and trusted tool.
However recently many serious secuirty issues have been observed in the software supply chain where malicious code has been surreptitiously embedded into legitimate programs, often by third party coding vendors.
There is no suggestion whatsoever that WinSCP has suffered any such issues, and is a very highly regarded utility by the community.
Nevertheless what assurances can be given to users in order to maintain confidence in the integrity of WinSCP, and what advice can be given to users to ensure what they download is trustworthy ?