If you&#x27;ve found a new project on GitHub that you want to use, how do you quantify the associated risk of using it in a &quot;production&quot; application? For example: the project is only open for 6 months, or has many more open issues vs. closed issues, or has negative sentiment in commit messages. Of course it&#x27;s a case-by-case basis, I&#x27;m looking for examples of what factors are deemed important when making this type of decision.
Ask HN: How do you measure risk with an open source project?