[rererererere]

  $ codesign  -vvv -d iflux
  Executable=f.lux-xcode-master/iflux
  Identifier=com.justgetflux.iflux
  Format=bundle with Mach-O universal (armv7 (16777228:0))
  CodeDirectory v=20200 size=645 flags=0x0(none) hashes=23+5 location=embedded
  Hash type=sha1 size=20
  CDHash=a32a120fefd588adbc6a420d6fc5786d223cfa72
  Signature size=4340
  Authority=iPhone Distribution: Michael Herf
  Authority=Apple Worldwide Developer Relations Certification Authority
  Authority=Apple Root CA
  Signed Time=11 Nov 2015 01:41:42
  Info.plist entries=35
  TeamIdentifier=VZKSA7H9J9
  Sealed Resources=none
  Internal requirements count=1 size=176

They were distributing a binary signed with their enterprise certificate and suggesting that user re-signs it. Additionally, flux.beta contains some auto-generated iOS project code, which is totally irrelevant. So it seems like the author himself does not quite understand what he was doing. It also makes sense that Apple took it down: it is against EULA to (publicly) distribute binaries signed with enterprise certificate.