We have not introduced any “blocking standards” that specifically exclude Skiff products.
I would like to make some mention of the audit that did occur in the description. I think this would be a good thing in Skiff’s favor if I did that. To do that, I’d like some description of what it contained, what was found, what commit was audited etc.
I took a look at the Skiff source code, is that it appears this not an active development repository, that means the source in skiff-org/skiff-mail, is almost certainly not what is in production. That means the “open source” claim is really a kind of, it might have been at one point in time.
Would I be right in assuming that those libraries are not available in the source repository? Or are they somewhere else?