[oskarkk]

> It's entirely open source

Not very reassuring in the context of the xz backdoor and sketchiness of this particular author. I think it's better to avoid it, regardless of whether the author is actually malicious. Giving the vibe of being somehow official and having this fake "company" is rightly criticized. That's not the behavior of the developer whose code I would want to run.

> of course the dev could tear up years of work and go rogue at any moment, like any other solo open source project dev

Given the sketchiness I'd say it's much more likely than with average dev.