I wouldnโt say itโs only for the extra paranoid, but rather for everyone.
After reading the whole discussion, itโs clear that the repo transfer was handled in an extremely unorthodox way, at least by usual standards for repo handovers that I'm familiar/experienced with.
Communication from Catfriend1 was absolutely nonexistent, and there was only minimal info from the person who took over using a GitHub account created just two days ago.
Trust is something that must be earned, not given to someone youโve never seen or heard of before.
Same thought here! ๐