Comment by bossyTeacher

> The assumption used to be that you respected the library enough and believed it was well reviewed and architected by the maintainer(s).

Let us be honest, for your average dev, the assumption was that the number of github stars, npm/nuget downloads was a god proxy for quality.