There's a git repository. It's public. You can look at what goes into
the FreeBSD git clone to get your assurance that things aren't being
snuck in. People are using it, right now.
I've always been confused by this. Which source repo is the true source
of truth?
To obtain the FreeBSD source,
http://www.fossil-scm.org/
I'm not fossil user, but it's BSD licensed in written in C.
Baptise Daroussin probably could tell us more about fossil pro and cons.
This misses one of of the main points raised in the original post. The
proliferation of git as a revision control system.
Also,