Best practice would suggest that making source code available and responding quickly to reported vulnerabilities is a given for government apps, but not yet in Australia.
Article Link: https://www.zdnet.com/article/australias-wobbly-start-to-covidsafe-app-transparency/#ftag=RSSbaffb68