normally in debian and debian derived distros you should just enable/add a deb-src repo and grab the source
That's right, but I don't have time to do that.
The source code is in the git repos so can be checked as you wish.
A few 3th party apps, such as: e20, budgie and tint2 has been compiled without changes (no patches), means they are vanilla, as the developers created them. I only grab the source (so you can do it too), compile and build debs. I don't provide source packages in sparky repos so you can't find them.
Anyway I can tar the source code and make *orig.tar.gz packages next time if you'd like.