Are you serious? It's open source. And there's less than 1000 lines total. Get Codex or Claude to review it if you're paranoid.

The thing is that how do you know at the end of the day that the compiled binary hasn't been tampered with "extra code" besides what's in the repo?

I don't even think notarization gets rid of this problem neither, so the best you can do for this is compile it yourself. Maybe I'm wrong!

	▲	alexford1987 4 hours ago \| parent \| next [-]
		Compiling it yourself is the best/only thing you can do if you really want to know what code went into a binary.
	▲	prmoustache 3 hours ago \| parent \| prev \| next [-]
		What prevents you from compiling it if it is open-source? That's what I do with every project delivered as docker image. I rebuild the app and the image.
	▲	4 hours ago \| parent \| prev \| next [-]
		[deleted]
	▲	4 hours ago \| parent \| prev [-]
		[deleted]

encom 4 hours ago | parent | prev [-]

Go easy on the guy. Mac users are so used to overpaying for trivial functionality.