I've shifted from Dropbox to RClone, from acpilight to brightnessctl, from spotify to spotify-launcher and so on.
Has anyone else having the same trust problem? Also, how do you stay updated with the situation?
I work in a corporate environment and malware is a no-go.