That's why it is sometimes safer to hire developers with some open source background. You are able to actually read their code and (if you really want to know the person) their mailing lists messages.