Hacker News Reader

It's "source available". They make changes to their server code, run those modified servers for a year or so and then release a source.

The server code isn't relevant in this case, you want the client code to be secure.