depends on the source, but if it is open source and someone I trust I suppose the same amount of suspiciousness asa non vibe coded app?