The dev should look into getting his project listed in coinsmarkets. It's the perfect entry exchange for this coin.
They won't list it until false positives are fixed.
It's easy to fix the false positives. The flags are on the IRC code for the nodes, besides, if they had a decent code analyst they would know by now that those flags are no threats at all.