Why this step exists
Blipcal is code-signed, and every update is signed with our key and checked by Sparkle before it installs. The prompt is simply how macOS treats apps from outside the App Store that are not yet notarized by Apple; it is not a sign that anything is wrong. Updates delivered through the app do not ask again.
See the download page to get Blipcal.
Still stuck? Email support@blipcal.com and we will help.