Ask HN: Why do people trust just about any bit of open source code?

People seem substnaially unconcerned about running anything on their server that "gets the job done", with little in the way of proof that the author is not a bad actor.

Why is this?