How to check an Android APK from GitHub before you install it (using my own app as the example)

A lot of good Android apps never make it to the Play Store, so you end up grabbing an APK from a GitHub release page. That's fine, but "trust me, it's open source" isn't really a check. I just shipped