You don't have to trust it. Just fork the code and deploy to your own heroku app.
I'm just proxying the calls through to the robinhood API. You can view the code on Github, server.js is what you're looking for.
The API is not exactly open yet, but it has been reverse engineered multiple times and Robinhood is aware of that.
It's cool that you built it, though I can't trust a third-party app with my Robinhood credentials.
Did you use a proxy to figure out the API calls, or do you actually official API access?
i didn't know they had an open API. scared of using this though as robinhood is directly connected to my bank account
Officially, the API is only open to "a select group of customers".