Got it. Fedi is acting like a sort of Amber with a browser with window.nostr - I love the idea.

However, Amber is free and open source code and afaik has reproducible builds.

But that Fedi repository has zero code. Just a README file? I don't even know why they have one. They could easily be sweeping people's nsecs and no one would know.