Some tools for F-Droid Data written in Python
audit-gradle.py
build-contains-signatures.py
Dependencies
check-for-unattached-signatures.py
Apps with reproducible builds include the APK Signature files in the metadata. If there is no matching entry in Builds:, then those files are useless cruft.