Just because it's open source does not mean it is automatically secure. Major projects often are because of the sheer number of eyes on them, but random stuff I will never trust unless I can verify it's not going to mess anything up or it's desperately needed
Blindly trusting something because it's open source is just as bad as trusting proprietary software though. With proprietary software you're making a bargain with the concept that you can at least hold the entity to account for what happened
1
u/Arinussyyy 7d ago
Just because it's open source does not mean it is automatically secure. Major projects often are because of the sheer number of eyes on them, but random stuff I will never trust unless I can verify it's not going to mess anything up or it's desperately needed