It is not open for me to port, repair, improve, or redistribute to signed and reproducible built distribution channels like f-droid, arch, or debain as I see fit. Honestly really disappointing from a team known for promoting right to repair. I was totally on board with sharing grayjay from the rooftops until I saw the LICENSE file and my heart sank.

Also at a minimum this creates a lack of accountability to prove given binaries came exactly from published code. Someone backdoors the grayjay CI/CD server and everyone gets a backdoored app. Centralized software distribution is irresponsible in a world where supply chain attacks are common.

If they just care about malicious impersonation they should have just done what Mozilla did and file trademarks but leave the code open.