Okay, as I don't have trust in organisations applying malware to downloads, abandoned or not, then I will consider other options.
I've already tried to build from source, but I gave up after hours of trying, it seems bizarrely painful as an experience.
I will have a look at the nosetup option over the weekend and see how that works out, thanks.