Wording of signed_by_fdroid string is inaccurate
It is currently
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
But this doesn't account for the srclibs or dependencies as they are fetched.
Related: fdroidserver#950
Perhaps an issue should be filed there on inclusion of the gradle/maven/etc. dependencies too?
Edited by IratePorcupine