It seems it would depend on the persons risk tolerance. And assessing risk of freely available open source software is still difficult, you either rely on all

It seems it would depend on the persons risk tolerance. And assessing risk of freely available open source software is still difficult, you either rely on all the authors being standup citizens, or on the bulk of the reviewers to be truthful and knowledgeable.