Or you can just use https://krypt.co/ which uses the same FIDO standard, is open source, works on both android and iOS (where it actually uses the secure enclave) and both in Chrome and Firefox
Having a source publicly available is one of the prerequisites for something to be considered open source, but it's far from being the only prerequisite.