Maybe they want to finish the audit first? Or other then that there's no reason to not showing the code (they're not working with a super secret algorithm)