Add information about who built the source code and signatures and reproducibility

Anna:

It’s possible that the app is open source, but the developer added unnecessary hidden functionality during compilation, then signed the app with their key and uploaded it to the f-droid directory.

No, it’s not possible, F-Droid always builds, for its own repo.

FAQ - App Developers | F-Droid - Free and Open Source Android App Repository etc