Thank you, yea it's just a start. I have some ideas around verifying zapstore itself, for now it's mostly through social (kind 1) clients 

 Are reproducible builds possible for zapstore itself? 

 Planned: https://github.com/zapstore/zapstore/issues/69