> If you stumble across an open source or just some other random project by a single dev, you have an instinctive expectation that the project could die at any time.

Ironically at this point, I'd place more trust on an open-source project because at the very least, if the maintainer abandons it, I could fork it and potentially self-host.