You wouldn't know unless it's checked by you or someone you trust, but IMO open source should generally be better cause if you're doing shady stuff you're probably less likely to make it public.
Also projects with lots of activity by different people are usually safer.
c/factorio