Hacker News Reader

That's assuming what's in the repo is the same code that is deployed.

You can make similar counterproductive claims about everything. How can you assume that your senses and all humans are not gaslighting you?

If you want to go down that rabbit hole, you may want to (re)read Ken Thompson's Reflections on Trusting Trust at https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...