I do it alone in my free time. NPM is the easiest way to publish an application. You can install the app locally at your place. And there is also a TG channel, there are posts on the functionality for review.
I'm supposed to just blindly boot it up on my computer, with the license explicitly banning decompiling and disassembling the code, so it could sensibly reviewed?