Looks cool. To gain any traction, it must be open source. Otherwise, how do I know whether the app sends my credentials to someone else?