I remember a while back Xash3D was a very illegal project gathering code from many other projects (sometimes without any form of credit). I'm unsure if the situation has dramatically changed, but I still wouldn't trust the project.
On Github:
> Xash3D Engine is a custom Gold Source Engine rewritten from scratch.