When you adopt an open source project as a dependency, check the values of the folks maintaining it. You're entering a long-term relationship with them, so you better ensure your values align.