Anyway, open source does not mean that much unless you are able to verify identical releases with reproducible builds.