There is no evidence the repo creator is trying to earn anyone's trust. This could be a personal project that they have no intention to try and "sell" to anyone. They may not be trying to earn the public trust and have no interest if anyone besides them uses it.

Then making it a public repo is a weird thing to do.

I don't know how it is currently, but you used to have to make GitHub repos public to access the full feature set (i.e. things like CI runners) on free accounts. Some of us just got in the habit of making things public

Why? I've never created a private repo on github for any of my personal projects. Stating with dotfiles