The linked GitHub issue mentions this: The new platform is a different system and doesn&#x27;t run Java so it&#x27;s not using the old code that was open. They found no reason to publish the new code as it doesn&#x27;t help anyone since it&#x27;s integrated into the rest of their platform.<p>And it sounds like you can&#x27;t update the code. So you don&#x27;t have a way of verifying what the actual device runs. So people complaining about trust here are somewhat misguided when they say they don&#x27;t want to trust Yubi. Open sourcing would only help find non malicious bugs. Since it sounds non modular there&#x27;s possibly all sorts of stuff mixed in making it hard to audit so they decided it wasn&#x27;t worth it.<p>Dunno if that&#x27;s right but that&#x27;s what it sounds like.