Cool. But neither the audit nor the repository explains if it's possible to create the APK in a reproducible way. Google Play distributed APKs contain their signatures, so in theory it wouldn't be possible to 1:1 reproduce the distributed ones.

However for F-droid this would allow them to sign their own APKs and provide some additional security guarantees in their supply chain.

Also a bit concerning that there is no tags yet in the repository.