I've some questions about Ghidra released by NSA on Github. And research about it then saw a ycombinator thread for it. That answer was clever and funny.
As title marked, you really okay for just "open source" to trust it?
If there is a healty sized developer group contributing. I tend to just install.
If there's just single developer, not much history and mayde AI involved, I'll just skip the software.
I don't have time to review the code and I don't think the developer wants me to feed the code to AI.
If AI is one of the developers and already involved, AI review is an option, if I really need to run it.