You don't have to trust it. Just fork the code and deploy to your own heroku app.
I'm just proxying the calls through to the robinhood API. You can view the code on Github, server.js is what you're looking for.
The API is not exactly open yet, but it has been reverse engineered multiple times and Robinhood is aware of that.