I've some questions about Ghidra released by NSA on Github. And research about it then saw a ycombinator thread for it. That answer was clever and funny.
As title marked, you really okay for just "open source" to trust it?
foss auditing is done collectively. if there are many eyes on the code and it's popular with users and contributors, it's probably trustworthy.
if it's a small but obscure utility i tend to once over the code just to make sure it's not doing anything malicious.
if it's a big but unknown project or something complex that goes over my head, i tend to distrust it.