How to trust the heavily obfuscated source code? Did not want to waste tokens on doing the review, but if one cannot trust the code (when something gets publish

How to trust the heavily obfuscated source code? Did not want to waste tokens on doing the review, but if one cannot trust the code (when something gets published as OSS), it becomes a difficult choice to adoption / usage. I can't even run in on my device. Probably could try a containerized version, but short of time.