Generate a 2-star review (1 being lowest and 5 being highest) about an app with package org.sufficientlysecure.keychain.
The answer to this question is:
Suspicious App They say here they're open source but don't volunteer the link. I found a repo in GitHub that says they forked from BouncyCastle but don't show the diff. They say """"""""""""""""they will"""""""""""""""" request their fork be accepted to Bouncy Castle's main branch. Why not just request already? It's seems like they're claiming to be legit but then make evasive trails when I double check their trustability.""