> This looks to be a clone of the prior state of the repository that caused all the Bambu drama earlier this week.

It looks like it might be a clone, but the git history is squashed for some reason.

I would recommend against installing this unless/until someone can do an audit to figure out which commit it was forked from and what the changes are.

Or better yet, find one of any of the other copies of the repository that don't have their git history squashed.

This looks like someone's attempt to capitalize on the drama to bring attention to their foundation (?) but losing git history is not a good thing for code provenance or security.