Nowadays even with a GitHub link or claims of being open source you have to go check the repository to see what license they actually have and what percentage of the source is actually there. Some repos even have only binaries and some have the source for the open source projects they use.

There's actually another category. Open source software with paid plugins. I always wonder what happens when someone adds similar functionality to the open source version.