even though heta you listed is almost a non-issue, if you wanted to still go tbis route the gh repo IS public iirc

also i’d recommended sideloading via altstore, since then you get automatic cert refreshes