Ask HN: Does anyone investigate open source packages before using in prod?

I'm curious to hear if anyone else does any due diligence before using open source packages in production? Not anything major - just checking for recent commits / activity, issue logs, etc.