The Free Software Foundation requires “CLAs” as well. I have no fear that they’re going to rug-pull. I don’t think we can use that as the indicator. IMO, it’s even a good idea to have a CLA so that’s no conflict that the project owns the code.
The warning for me is if the project is run by a company, especially a VC-backed company. Joplin isn’t, so I would be comfortable using it (although I don’t).
The Free Software Foundation requires “CLAs” as well. I have no fear that they’re going to rug-pull. I don’t think we can use that as the indicator. IMO, it’s even a good idea to have a CLA so that’s no conflict that the project owns the code.
The warning for me is if the project is run by a company, especially a VC-backed company. Joplin isn’t, so I would be comfortable using it (although I don’t).