And that’s why I always find it funny when people mention a project being open source as a reason why it should be trusted, that only works if someone bothers checking the code and for smaller projects people very often don’t.