Recently, I've been teaching my friends how to evaluate whether a project is "reliable or not," and I found it's not that mysterious after all. Don't just look at the stars on GitHub; first check if the updates are intermittent, and whether the commits are from the same one or two small accounts just having fun; also, don't just look at the "pass" in the audit report; focus on whether the list of issues has been seriously addressed or if they just leave a line saying "Known risks, handle at your own risk" and move on. Upgrading multi-signature is even more critical; who can sign, what is the threshold, can the signers be changed arbitrarily—this thing is like a door lock or a safe, not obvious in daily use, but when something goes wrong, it all depends on it. Recently, the main public chain is about to upgrade/maintain, and everyone in the group is guessing whether the project will move away. I, for one, will first make a list of interactions, and wait for off-peak hours to do it, so as not to gamble on luck during congestion.