What do you mean by source?

Apps are compiled from source code - that's what programmer writes. By inspecting the source code, you can see how your seed is processed.

What if I am not a programmer. What if I can't do reproducible build checks?

I believe than you'd need to trust that the TLS certificate + domain name matches the mint's domain. You've had trusted the mint already when you've minted the ecash.