I have seen that the GrapheneOS official social media has publicly recommended the mollyim-android app for Signal communications: https://nitter.net/GrapheneOS/status/1621366084669476866#m

Does GrapheneOS know of either:
a) Any code review that has been done by a known/trusted source of the diff of changes for Molly versus upstream Signal.
b) A personal basis of trust with the developers of Molly, https://github.com/valldrac and https://github.com/p1gp1g (ie, examples of their participation in trusted networks or organizations, or any knowledge of who they are outside of their online presence and contributions to this project).

For the second point, I fully respect and support the choice of open source developers (or anyone else) to remain anonymous on the internet, and do not want anyone to post personal information about these developers here without their consent. However, I also think when trusting an application with sensitive information (or recommending it to others), there is a justifiable expectation of due diligence for finding some basic levels of trust for the software, whether that is technical, personal, or both.

In asking this, I'm not trying to call into question the trustworthiness of the Molly developers or software. I think the features they are adding to the Signal client are really useful and important. I see good reasons to use and support the project, and one of the only missing pieces for me is regarding the technical and/or personal trust I'm asking about above. Researching this question led me to the recommendation from GrapheneOS (which I have a basis for trusting as a project) which leads me to post this question here. Thanks!