The Free Software Foundation requires "CLAs" as well. I have no fear that they're going to rug-pull. I don't think we can use that as the indicator. IMO, it's even a good idea to have a CLA so that's no conflict that the project owns the code.
The warning for me is if the project is run by a company, especially a VC-backed company. Joplin isn't, so I would be comfortable using it (although I don't).
RIP to all on those flights.
VASAviation has the raw ATC audio. If you're not used to listening to ATC, read the comments for interpretation. Lots of experienced folk there.
In general, the aviation industry doesn't assign individual "fault" the way many do. It's taken as a collective responsibility. It seems at this stage that there's a lot of responsibility on the helo pilot, but there's also some communication ambiguity. Let's let the pros do their work and not jump to conclusions.