That initial list is a brilliant checklist for before you stake a key part of our architecture on X, answer the following....
reworded to the positive
Does it perform well?
Is it inexpensive?
Is it open source?
Does it lack features?
Does it have a community?
Does it have debug tools?
Does it have maintainers? (or other quality symbols)
It is properly documented?
Does it receive timely security fixes?
Does it show subject matter expertise?
Are we the audience it was developed for?
Why isn't our custom internal solution is good enough?
Is it's longevity understood: Its startup may be dead or sold soon.
Have we been in touch with the maintainer?
Does this solution make sense for a reasonable window of time?
Does it have industry credibility?
Is the community Code of Conduct congruent with our values?
Do our lawyers accept its T&Cs or license?
